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1. Introduction 



While the main goal of this paper is to give a bound on the denominators of Igusa class poly- 
nomials of genus 2 curves, our motivation is two-fold: on the one hand we are interested in 
applications to cryptography via the use of genus 2 curves with a prescribed number of points, 
and on the other hand, we are interested in construction of class invariants with a view towards 
explicit class field theory and Stark's conjectures. In the following we give an overview of these 
motivating problems and explain the contents of the paper. 

Some basic protocols in public key cryptography such as key exchange and digital signatures rely 
on the assumption that the discrete logarithm problem in an underlying group is hard. Current 
available alternatives favor the use of the group of points on an elliptic curve or the Jacobian 
of a hyperelliptic genus 2 curve over a finite field as the underlying group. The security of the 
system depends on the largest prime factor of the group order, so it is crucial to be able to 
construct curves such that the resulting group order is prime. Also, for applications in pairing- 
based cryptography, it may be necessary to impose additional divisibility conditions on the group 
order. Parameterized families of curves satisfying these type of conditions are called pairing 
friendly curves. Thus algorithms to construct curves with prescribed group orders are required. 
Currently, typical minimum security requirements require a group size of at least 2^^^ when the 
best-known attacks are square-root algorithms, giving roughly 128 bits of security. Compared 
to elliptic curves, Jacobians of genus 2 curves are an attractive alternative because they offer 
comparable security levels over a field of half the bit size, since the group size of the Jacobian 
of a genus 2 curve over a finite field ¥p is roughly p^, whereas elliptic curves have group size 
roughly p. 

In the case of elliptic curves, the polynomial-time point-counting algorithm proposed by Schoof 
and improved by Elkies and Atkin (or the newer Arithmetic-Geometric mean algorithm) allows 
the following approach: one can pick elliptic curves over a finite field of cryptographic size and 
count points until a prime group order is found. This solution will not work for generating 
pairing-friendly curves however. Also, over prime fields of cryptographic size, it will not work for 
hyperelliptic curves of genus greater than one, either. Starting with the work of Atkin and Morain 
on generating elliptic curves with a prescribed group order for primality proving, the standard 
approach to constructing such curves has been to use the theory of Complex Multiplication in 
the so-called CM method. 

Given a prime number p, and a non-negative group order N lying in the Hasse-Weil interval 
\p + 1 — 2^yp,p -|- 1 -|- 2y/p], the goal is to produce an elliptic curve E over ¥p with N Fp-points: 
^E{¥p) = N = p+ l — t, where t is the trace of the Frobenius endomorphism of E over Fp. Set 
D = — 4p. The Frobenius endomorphism of E has characteristic polynomial x'^ — tx + p, so it 
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follows from the quadratic formula that the roots of this polynomial lie in It is standard 

to associate the Probenius endomorphism with a root of this polynomial. If E is not supersingular, 
then R, the endomorphism ring of E, is an order in the ring of integers of K = Q(\/^). Now the 
problem is transformed into one of generating elliptic curves with endomorphism ring equal to 
an order in K. The correspondance between isomorphism classes of elliptic curves over Q with 
endomorphism ring equal to Ok and primitive, reduced, positive definite binary quadratic forms 
of discriminant D gives an easy way to run through all such elliptic curves. 

Define the Hilbert class polynomial H£)[X) associated to the field K as follows: 

where the product ranges over the set of (a, h) G such that ax^ + hxy + cy^ is a primitive, 
reduced, positive definite binary quadratic form of discriminant D for some c E Z, and j denotes 
the modular j-function. The degree of H£){X) is equal to hx, the class number of K, and it is 
known that H£){X) has integer coefficients. To find an elliptic curve modulo p with N points 
over Fp, it suffices to find a root j of H£){X) modulo p. One can then reconstruct the elliptic 
curve from its j-invariant j. Assuming j ^ 0,1728 and p ^ 2,3, the required elliptic curve is 
given by the Weierstrass equation = + 3kx + 2k, where k = ij2?,-j ■ '^^^ number of points 
on the elliptic curve is either p + 1 — torp-\-l + t, and one can easily check which one it is by 
randomly picking points and checking whether they are killed by the group order. 

There are at least three approaches to computing the Hilbert class polynomial. The complex 
analytic approach computes H£)[X) as an integral polynomial by listing all the relevant binary 
quadratic forms, evaluating the j-function as a fioating point integer with sufficient precision, and 
then taking the product and rounding the coefficients to nearest integers. The Chinese remainder 
theorem (CRT) approach computes H£,[X) mod £ for sufficiently many small primes I and then 
uses the Chinese remainder theorem (CRT) to compute H£){X) as a polynomial with integer 
coefficients. The p-adic approach uses p-adic lifting to approximate the roots and recognize the 
polynomial. These algorithms are all satisfactory in practice for small D, and the current world 
record for the largest D for which H£){X) has been computed is held by the Explicit CRT method 
for some ll^l > lO^^ [g^ 

The situation for generating genus 2 curves is more difficult. The moduli space of genus 2 curves 
is 3-dimensional and so at least 3 invariants are needed to specify a curve up to isomorphism, 
and, in fact, Igusa's results show that most genus curves are determined by 3 invariants. The 
CM algorithm for genus 2 is analogous to the Atkin-Morain CM algorithm for elliptic curves just 
described. But whereas the Atkin-Morain algorithm computes the Hilbert class polynomial of 
an imaginary quadratic field K by evaluating the modular j-invariants of all elliptic curves with 
CM by K, the genus 2 algorithm computes Igusa class polynomials of a quartic CM field K by 
evaluating the modular invariants of all the abelian varieties of dimension 2 with CM by K. 

For a primitive quartic CM field K we can define Igusa class polynomials 

hi{X) = l[iX-j,{T)), i = 1,2,3, 

T 

in analogy with the Hilbert class polynomial for a quadratic imaginary field; they depend on 
the quartic CM field K, but we suppress it in the notation. The roots are CM values of Siegel 
modular functions, and it is known that these roots generate abelian extensions of the reflex field 
of K. Again in analogy with the elliptic curve case, CM values of modular functions on the Siegel 
upper half space can be directly related to the invariants of a binary sextic defining the genus 2 
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curve associated to the CM point. Note that the j-invariant of an elhptic curve can be calculated 
in two ways, either as the value of a modular function on a lattice defining the elliptic curve 
as a complex torus over C, or directly from the coefficients of the equation defining the elliptic 
curve. Similarly for genus 2 curves, the triple of Igusa invariants of a genus 2 curve can also be 
calculated in two different ways. Using classical invariant theory over a field of characteristic zero, 
Clebsch defined the triple of invariants of a binary sextic / defining a genus 2 curve = f{x). 
Bolza showed how those invariants could also be expressed in terms of theta functions on the 
period matrix associated to the Jacobian variety and its canonical polarization over C. Igusa 
showed how these invariants could be extended to work in arbitrary characteristic, and so the 
invariants are often referred to as Igusa or Clebsch-Bolza-Igusa invariants. These invariants will 
be discussed in more detail in § [2] below. To recover the equation of a genus 2 curve given its 
invariants, Mestre gave an algorithm which works in most cases, and involves possibly passing to 
an extension of the field of definition of the invariants ( |Mesj ) . 

The CM algorithm for genus 2 curves takes as input a quartic CM field K and outputs the 
Igusa class polynomials with coefficients in Q and if desired, a suitable prime p and a genus 2 
curve over ¥p whose Jacobian has CM by K. The CM algorithm was first implemented by 
Spallek |Spa| , van Wamelen |Wamj . and Weng [Wen| . Alternative algorithms for computing 
Igusa class polynomials have also been proposed and studied, such as the genus 2 Explicit CRT 
algorithm [ELj and a p-adic approach [GHKRW] . 

To compute the Igusa polynomials, Spallek |Spa determined a collection of period matrices 
which form a set of representatives for isomorphism classes of polarized abelian surfaces with CM 
by a given field. Determining this set was complicated, and a complete set of representatives 
in general was not determined until the recent work of Streng |Str| . In [Wen] . Weng gave an 
algorithm for computing the minimal polynomials of Igusa invariants by evaluating Siegel modular 
forms to very high precision in order to recognize the coefficients of the minimal polynomials as 
rational numbers. Unfortunately, the polynomials hi{X) have rational coefficients, not integral 
coefficients, which makes them harder to recognize from fioating point approximations. The large 
number of fioating point multiplications performed in the computation causes loss of precision and 
makes the algorithm hard to analyze. The running time of the CM algorithm had until recently 
not yet been analyzed due to the fact that no bound on the denominators of the coefficients of 
the Igusa class polynomials was known. 

Since the polynomials hi[X) have rational coefficients, we can ask about the prime factorization 
of the coefficients. In particular, the primes appearing in the denominators are of special interest. 
In |Lauj ■ it was conjectured that primes in the denominator are bounded by the discriminant 
of the CM field and satisfy some additional arithmetic conditions. In fact, the primes in the 
denominator are primes of bad reduction for the associated curve. It was shown in |GLlj that 
bad reduction of a CM curve at a prime is equivalent to existence of a solution to a certain 
embedding problem: embedding the ring of integers of the primitive quartic CM field into the 
endomorphism ring of a product of supersingular elliptic curves in a way which is compatible with 
the Rosati involution induced by the product polarization. In |GLlj . we provided bounds on the 
primes which can appear in the prime factorization of the denominators. In the present paper, we 
extend that work to provide bounds on the powers to which those primes appear, thereby proving 
an absolute upper bound on the size of the denominators. Our bounds have already been used 
in |Strj to provide a complete running time analysis of the complex analytic CM method for genus 
2. The additional arithmetic conditions turn out to be equivalent to superspecial reduction of 
the abelian surfaces in question and so are essentially covered by |Gorj , and in more generality in 
^of this paper. In related work |BY| . the factorization of the denominators, when averaged over 
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the corresponding CM cycle, was studied and a precise conjecture was formulated. In subsequent 
work of Yang, the conjecture was proved for certain classes of quartic CM fields, thereby giving 
tight bounds on the size of the denominators in those cases. But a general bound needed for the 
complexity analysis has not been known until the work of the present paper. 

The investigations carried out in this paper also have a completely different motivation, which 
comes from class field theory and Stark's conjecture. Consider the modular form that we call 
in this paper ( ^2.4p : it is the unique Siegel cusp form of weight 10 and full level, up to a scalar, 
and is equal, up to a scalar, to the product of the squares of the 10 even Riemann theta functions 
of integer characteristics. In many ways @ is the analogue the elliptic cusp form A of weight 12. 
Because of this analogy, Goren and Deshalit have studied in |DSGj certain algebraic numbers 
constructed from values of @ at CM points associated to a primitive quartic CM field K, whose 
definition parallels the definition of the Siegel units. Certain expressions in such values gave 
quantities u{a, b) associated to certain ideals in K, that depend also on the choice of CM type. 
These quantities lie in the Hilbert class field of the reflex field of K and have many appealing 
properties, such as a nice transformation law under Galois automorphism, and their dependence 
only on the ideal classes of a and b. Thus, one is justified in calling them class invariants. 

A natural question that arose is whether these invariants are actually units, or close to being 
units, in the sense that one knows their exact prime factorization, and these primes are small 
relative to, say, the discriminant of the field K. While we do not have complete solutions, several 
results concerning these have been obtained by the authors in recent years |GLH [GL2] . See also 
|Valj for numerical data. One of the main reasons to study such quantities is Stark's conjecture. 

Recall that for a number field K and tn, a modulus in K divisible by all the infinite primes, 
Stark's conjecture asserts that if C{K;A,0) = then there exists a unit u{A) of K[m] (the 
associated ring class field) such that 

C{K,A,0) = log\u{A)\, 

where C{K;A,s) is the partial zeta function associated to an ideal class A modulo m. In spite 
of much work in this area, it is fair to say that Stark's conjecture is essentially completely open. 
It is believed that the main obstacle is finding a "good" construction of units, and that was 
precisely the motivation of |DSGj . although the problem of relating the class invariants u(o, b) 
to L-functions is still outstanding. 

Now, as it turns out, the denominators occurring in the coefficients of the Igusa class polyno- 
mials hi have to do with the modular form Q as well, and essentially both questions - the nature 
of the denominators and the factorization of the invariants n(o, b) - have the same underlying geo- 
metric question, which is whether an abelian surface with CM by K, over some artinian local ring, 
can be isomorphic to a product of elliptic curves (with additional conditions on polarizations). 
The main theorem of the paper is the following. 

Theorem 17.0.41 Let f = g/A^ be a modular function of level one on Sj2 where: 

(1) A is Igusa's XW; the product of the squares of the ten Riemann theta functions with even 
integral chracteristics, normalized to have Fourier coefficients that are integers and of 
g.c.d. 1. 

(2) g is a level one modular form of weight 10k with integral Fourier coefficients whose g.c.d. 
is 1. 
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(1.0.1) valp,(/(r))> 



Then /{t) £ L = NHk* and 

_4A;eAog,(^)+l) e<p-l 
-4ke ^81ogp ^ "^^2^^ ^ + 2^ any other case. 

Furthermore, unless we are in the situation of superspecial reduction, namely, we have a check 
mark in the last column of the tables in §0 valp^(/(T)) > 0. The valuation is normalized so that 
a uniformizer at pi has valuation 1. 

Corollaries 17.1.11 17.1.31 of this theorem give the applications to denominators of Igusa class 
polynomials and class invariants described above. 

In order to prove this theorem, we develop several tools that are of independent interest. 
The first one is an explicit determination of the reduction of abelian surfaces with complex 
multiplication. The main invariants of an abelian surface A over a field of characteristic p > 
are its /-number, that determines the size of the etale quotient of A[p], and the a-number that 
determines the size of the local-local part of that group scheme. These numbers determine, for 
example, in which Ekedahl-Oort strata the moduli point corresponding to A lies. It turns out, 
and that was essentially known by [Gor] and [Yuj . that these numbers can be read from the 
prime factorization of p in the normal closure N oi K over Q and the CM type. However, to our 
knowledge, a complete analysis had not appeared in the literature, and we make this analysis 
explicit here, dealing also with ramified primes, in a self-contained manner. 

For a prime p to appear in the denominators of the hi, or for p\p to appear in the factorization 
of a u(a, b), some abelian surface with CM by K must be isomorphic over ¥p to the product of two 
supersingular elliptic curves E x E' . This gives / = 0, a = 2, and so sieves out the "evil primes" 
according to their factorization in A^. A further, and most important condition, is imposed by 
the fact that the Rosati involution oi E x E' must induce complex conjugation on K. We are 
able to translate the fact that a prime appears to a certain power in the denominators of the hi 
(similarly for the u(a, b)) to the fact that a similar situation must hold over a certain artinian ring 
{R, m) and the index of nilpotency of m is proportional to the power of the prime. This requires 
some results in intersection theory (^ and the introduction of an auxiliary moduli space (^. 

A certain maneuver, already used in |GLlj . allows us to reduce the problem to a question 
about endomorphisms of elliptic curves over R whose reduction modulo m is supersingular. Some 
special instance of this problem was studied by Gross in |Grsj . but his results do not suffice for 
our purposes. We approach this problem using crystalline deformation theory in ^ in the course 
of developing the results we need, we provide some more general results that are natural in that 
context and will, so we believe, be useful for others. Since crystalline deformation theory is only 
valid under certain restrictions on ramification, we provide an alternative approach that works 
without any restriction ( ^6.6p and gives results that are not too much worse than crystalline 
deformation theory gives. 



2. Moduli of curves of genus 2 

2.1. Curves of genus two - Igusa's results. Let 2/1,2/2)2/3 be independent variables and let 
2/4 = liviy-s - vD- The group of fifth roots of unity /X5 acts on the ring ^[Cs] [2/1, 2/2, 2/3, 2/4] by 
[C](2/j) •= CUi (and trivially on the coefficients). The ring of invariants is defined over Z and we 
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denote it, by abuse of notation, 



One of Igusa's main results Igul p. 613] is that the coarse moduli space of curves of genus 2, 
satisfies 

(2.1.1) ^2 = Spec(Z[yi, 2/2,2/3,2/4]'"'). 

This ring of invariant elements is generated over Z by 10 elements. We remark that outside the 
prime 2, namely if we work over Z[l/2], we can dispense with 7/4 and conclude that 

^2 (S> Z[l/2] ^ Spec(Z[l/2] [2/1,2/2,2/3]'''). 

(Same abuse of notation.) Note that to find generators over Z[l/2] for Z[l/2][yi, 2/2, 2/3]'"' amounts 
to finding vectors (a, b, c) G Z>q such that a + 26 + 3c = (mod 5) that generate the semigroup 
{(a, b, c) € Z>Q : a + 26 + 3c = (mod 5)} - one associate to the vector (a, 6, c) the monomial 
2/12/22/3. Such generators are given by the following 8 triples: 

(2.1.2) {(0,0, 5), (0,5,0), (5, 0,0), (0,1,1), (1,2,0), (3, 1,0), (1,0, 3), (2, 0,1)}. 

On the other hand, given a field k of odd characteristic, to find generators for the fraction 
field Prac(fe[yi, y2, 2/3]'''), one needs generators for the group {(a, 6, c) G Z^ : a + 26 + 3c = 
(mod 5)}, which one can choose to be the vectors (2, —1,0), (3, 0, —1), (5, 0, 0) (corresponding to 
the monomials 2/1/2/2, 2/1/2/3, 2/i), foi' example. 

Igusa's construction is based on much earlier work by Clebsch and others on invariants of 
sextics. A genus 2 curve is hyperelliptic, where a hyperelliptic curve is defined to be a curve 
which is a double cover of the projective plane. In characteristic different from 2 the situation is 
very much like over the complex numbers, and one can conclude that such a curve can be written 
as = /(x), where f{x) is a separable monic polynomial of degree 6, uniquely determined up 
to projective substitutions, thus reducing the problems of classifying genus 2 curves to studying 
when two sextics are equivalent under a projective transformation, or, equivalently, studying the 
space parameterizing unordered 6-tuples of points in P^. 

2.2. Igusa's coordinates. To describe the invariants of sextics we use Igusa's notation. Let 

2/^ = fix) = uqx^ + uix^ H h ue, 

be a hyperelliptic curve and let xi, . . . , xg be the roots of the polynomial f{x). The noation (ij) 
is a shorthand for the expression (xj — Xj). Consider then 

(2.2.1) A{u) = ^ (12)2(34)2(56)2 

fifteen 

(2.2.2) B{u) = ^^(12)2(23)2(31)2(45)2(56)2(64)2 

ten 

(2.2.3) C{u) = n[j ^(12)2(23)2(31)2(45)2(56)2(64)2(14)2(25)2(36)2 

sixty 

(2.2.4) D{u) = ul'Hiijf 

i<j 

The subscript "fifteen" in A refers to the fact that there are 15 ways to partition 6 objects 
into 3 groups of 2 elements, the subscript "ten" in B refers to the fact that there are 10 ways 
to partition 6 objects into 2 groups of 3 elements. The subscript "sixty" refers to partitioning 6 
objects into two groups and then finding a matching between these two groups: there are 10 
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ways to partition into 2 groups and six matching between the two chosen groups. The invariants 
A,B,C,D are denoted A',B',C',D' in |Mesl p. 319], but we follow Igusa's notation; these 
invariants are often called now the Igusa-Clebsch invariants. Another common notation one finds 
in the literature is I2 = A,!/^ = B, Iq = C, Iio = D, for example in the Magma help pages on 
February 2010, but we shall avoid using it, especially since it conflicts with Igusa notation as in 
[li^ p. 848]. 

The invariants A,B,C,D are homogenous polynomials of weights 2,4,6 and 10, respectively, 
in uq, . . . ,uq, thought of as variables. In addition they are invariants of index 6, 12, 18 and 30, 
respectively. This means the following: Let /(x, z) be the homogenized form of /, that is, 

/(x, z) = UqX^ + UiX^Z + • • • + UqZ^. 

Let M= (^°^) G GL2 and let 

X = ax' + (3z', z = 7x' + 6z' . 
Write, by substituting these expressions for x, z, and expanding, 

r/ \ / /d , / /5 / , , / /G 

J[X,Z)=UqX + UiX Z + ■ ■ ■ + UqZ . 

Then, a polynomial J = J{uq, . . . ,uq) in the variables uq, . . . ,uq is called an invariant of index k 
if 

J{u'o, ...,u'q) = det(M)^- JK, • • • , uq). 

The terminology here is classical and follows, e.g., [Mesj . (An invariant, in the terminology of 
loc. cit, is a covariant of order 0, which means it is an expression in the coefficients of / alone, 
as is the case here.) An invariant of degree r of a sextic has index 3r; cf. loc. cit. p. 314. 

Note that if we let /' be the polynomial f'{t) = u'^t^ + ■ ■ ■ + u'q then the two hyperelliptic 
curves 

C:y' = fix), C : y''^ = fix), 
are isomorphic. Indeed, the map 

' ax' + b y' 



ix',y') ^ix,y) :-- 
gives an isomorphism C C as ((^jrp^)^ = /(ff^)- 

In characteristic 0, every sextic gives a vector iA, B,C, D) with D ^ and, vice-versa, every 
such vector comes from a sextic. Two curves over an algebraically closed field are isomorphic 
if and only if one curve has invariants iA, B,C, D) and the invariants of the other curve are 
^A : r^B : r^C : r^^D) for some r 7^ in the field [Igul Corollary, p. 632] (it would have 



been more natural to write the powers of r in multiple of 6, but we follow convention here). 
Thus, it is natural to associate to a sextic a vector iA : B : C : D) in the weighted projective 
space IP2 4 6 10- Similar to the case of the usual projective space ^ ^, the complement of the 
hypersurface defined by -D = is affine. But, where for a usual projective space with coordinates 
(xo, xi, X2, X3) the affine variety is Spec(Q[xo/x3, X1/X3, X2/X3]), for a weighted projective space 
we need more functions; at the case at hand one needs 10 functions, and these will be given below 
in terms of the J2i', every regular function on the affine variety IP2 4 e 10 \ = 0} is a polynomial 
in these functions. 
Define 
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J4 = - Je = 2-^3-^ (SJ'i -160 J2J4-C) 

Jg = 2-2(J2J6 - J|) Jio = 

A calculation shows that these invariants still make sense in characteristic 2. 

Let 9^ be the ring of homogenous elements of degree zero in the graded ring generated over Z 
by • • • ) Jio and localized at Jiq. In fact, any absolute invariant, namely any invariant which 

is the quotient of two invariants of the same index, belongs to 9^ ( |Igul Proposition 3, p. 633]). 
One can show that there is an isomorphism 

IR^Z [2/1,2/2, 2/3, 2/4]^% 

uniquely determined by 

"^2 "^4 "^6 "^8 "^10 ^ yi i'2 i/S ^4 ' 

where the ei are non-negative integers satisfying the relation ei + 2e2 + 3e3 + 4e4 = 5e5 and as 
before 2/4 = ^(2/12/3 — 2/2)- Igusa proceeds to show that the ring is generated by 10 elements 
over Z, and by 8 elements over Z[l/2], and that is best possible. 
Over Z the generators of can be taken to be the following. 

12 = 73 = '/I'^e/'/io 1A = J2J8/J10 15 = J^Jq/Jio 

71 = Jl/Jio 

76 = ■hJ'il'Jio 77 = JiJs/Jio 78 = -/iZ-^io 79 = hJi/Jio 710 = Js/JlQ 
(Over Z[l/2] a set of generators is 

gi = J2/Jio 92 = J2Ji/Jio 93 = J2Ji/Jw 94 = <^2 '^e/'^lO 

95 = J^Jq/ 'ho 96 = J2Ji/Jio 97 = Ji/Jio 98 = Ji/Jio 

(and the reader will recognize the exponents from ()2.1.2p .l We call them the Igusa coordinates 
of ^2- Here are some consequences of these results. 

(1) Let Ci, C2, be curves over an algebraically closed field k, and write Ci : = fi{x), where 
fi{x) G k[x] is a sextic. Then, 

Ci ^ C2 ^ (7i(/i), . . . ,7io(/i)) = (71 (/2), . . . ,7io(/2)). 

(2) Let C now be defined over a number field Lq, C : y'^ = f{x),f{x) E ^oH, then C has 
potentially good reduction at a prime p of Lq, namely, there exists a finite extension field 
L/Lq and an ideal of L such that C has good reduction modulo *P, if and only if 

valp(7,(/)) > 0, i = l,...,10. 

(3) Let Ci,C2, be curves over a number field L, Ci : y"^ = fi{x) as above, having good 
reduction at p. Then, 

Ci (modp)^/p^C2 (modp) ^ 

(71 (/i), • • • ,7io(/i)) = (7i(/2), • • • ,7io(/2)) (mod p). 
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2.3. Efficacy of the absolute Igusa invariants. The so-called absolute Igusa invariants are 
the functions 

ii = A^/D, i2 = A^B/D, i^ = A^C/D. 

The choice of terminology is somewhat unfortunate, as it leads one to think that these invariants 
determine the isomorphism class of the curve; we'll discuss it further below. 

Since D = 2^^ Jio, the functions ii, ^2, ^3, belong to 9'l(8'Z[l/2]. It is a consequence of the results 
mentioned so far that the functions 7j are rational functions of the functions ij and vice-versa. 
This calculation is presented in the following two tables. 

Table 2.3.1. The absolute Igusa invariants ii,«2>^3 in terms of the generators 7j 



k 


8-71 




i • (71 - 24 • 72) 




i • (71 - 20 • 72 - 72 • 73) 



An interesting consequence of this calculation is that the natural map 

^2<8)Z[l/6] = Spec(<K«) [1/6]) Spec(Z[l/6][ii, ^2, ^3]) = A|[^/g], 

can be inverted whenever ii 7^ 0. However, given a triple (ii,«25^3)i which is in the image of the 
map, and such that ii = 0, we find that ^ = and hence also that ^2 = *3 = 0. Thus, there is a 
unique point of A'^, which is in the image, for which we cannot invert the map and it corresponds 
to all the genus 2 curves for which ^ = 0. Thus, the absolute Igusa invariants fail to completely 
determine the isomorphism class of the curve, but only if ii = 0. 

The vanishing locus of A is a surface in There is a natural immersion, 

p : .-#2 — > ■6*2,1, 

of the moduli space of curves ^2 to the moduli space of principally polarized abelian surfaces 
with no level structure .52^,1, sending a curve to its canonically polarized Jacobian. The image is 
the complement of the Humbert surface H\, which is the divisor of the modular form defined 
below. Via this map, each of the Igusa invariants is, in a suitable sense, a pull-back via p of a 
meromorphic Siegel modular form whose polls are supported on H\. These modular forms were 
calculated by Igusa |Igu3[ p. 177-8] and the reader is referred to this reference for details. The 
invariant D is the pullback of a scalar multiple of 0, defined in page[12j There is a modular form 
of weight 12, which Igusa denotes xi2, such that, in a suitable sense, A is a scalar multiple of the 
weight 2 meromorphic form Xi2/0- We have thus, as sets, 

{A = 0} = p-\xi2 = 0}. 

The modular form xi2 is a cusp form (see |Igu2[ p. 195]). However, there does not seem to be 
any simple interpretation to its vanishing loci. Indeed, the results of [vdG] (see, in particular, §8 
there) imply that the divisor of xi2 is not supported on a union of Humbert surfaces. 
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Table 2.3.2. The generators jj in terms of the absolute Igusa invariants 11,12,^3 
(the last column gives the denominator) 



/i 


• ii 


72 


2-63-1 . (i^ - 16 .^2) 


73 


33^^ • (ii + 80 • i2 " 384 • ia) 


;4 


r)-ll<j-3 ii^+416- ii 'i2-1536- ii 13-768- 12^ 
n 


75 


r)-10 3-4 (ii-16- i2)(ii+80- 12-384- 13) 


76 


„_25 Q — 7 (ii — 16- i2)(ii^+416- ii 12 — 1536- ii 13 — 768- 12^)^ 
Z ■ • ^ 


77 


0-22 Q-9 (ii+80- 42-384- 13)^(^1^+416- ii 12-1536- ii 43-768- 12^) 

ii"' 


78 


r,-29 0-15 (ii+80-i2-384-i3)'i 
Z --i ■ i^i 


79 


0-37 Q-12 (ii+80- 12-384- i3)(ii = +416- ii Z2-1536-ii 13-768- 12^)^ 
Z ■ • ^-5 

11 


710 


52 Q 15 (41^+416-1112 — 1536-4183-768-12^)'' 



Proposition 2.3.1. Let V C £/2,i{C) be the support of the divisor o/xi2- There are finitely 
many primitive CM points on V, that is, CM points associated to primitive CM fields of degree 
four. 

Proof. Let S be the collection of all primitive CM points on V . We note that the description 
of ^2 implies that V is irreducible. Let C be the Zariski closure of S. If S is infinite then C is 
either a curve, or V itself. In either case, it follows from the Andre-Oort conjecture, known to 
be true under GRH by the work of Klinger-Yafaev |Yaf j . that C is either a Shimura curve, or a 
Shimura surface. It remains to review the possibilities: (i) if C is a Shimura curve then every CM 
point on C is coming from a bi-quadratic (equivalently, non-primitive) CM field of degree 4; (ii) 
C = V then V is a priori in the Hecke orbit of some Humbert surfaces, but that Hecke orbit 
is a union of Humbert surfaces (this follows easily from the moduli interpretation). Since the 
Humbert surfaces in £/2,i are irreducible, F is a Humbert surface itself, which is not the case. □ 

2.4. Igusa class polynomials. In |GLH §5.2] it was explained how the absolute Igusa invariants 
can also be expressed in terms of Siegel modular functions. We summarize this here for the 
reader's convenience. 

The Igusa functions ii, 12, is can be defined as rational functions in Siegel Eisenstein series, ijjw, 
of weights u) = 4, 6, 10, 12. To begin with, the cusp forms and X12, of weights 10 and 12, 
introduced above can be expressed in terms of these Eisenstein series as follows ( |Igu2 p. 195] 
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and [Tguil p. 848]): 



-2-2e = xio 



-43867 



212 . 35 . 52 . 7 . 53 



and 



X12 



131 • 593 



213 . 37 . 53 . 72 . 337 
Then the Igusa functions 11,12,^3 can be expressed as 

i ^^4X12 



egiV' 



12 



5 

9 05X12 

Xio 



2"^ • 3^ 



(3' • 7>i + 2 • S'^Ve 

V'6X?2X10 + 2^ • 3V'4Xl2 



xlo 



«3 



• 3- 



xto 



(These are often called ji, j2, J3 in the literature, but we stick with Igusa's notation.) 

Let K be a primitive, i.e. not biquadratic, CM field of degree 4 over Q. We define the Igusa 
class polynomials to be: 



(2.4.1) 



hi{x) = Y\{x -ii{T)), h2{x) =Y\{x -i2(T)), h^{x) =Y\{x - izir)), 



where the product is taken over all r E Sp(4, Z)\i32, such that the associated principally polarized 
abelian variety has CM by Ok- One can define other absolute invariants, called ji, 325 13? as 
in |GLlt p. 473], where it is also remarked that ii = 2^^^ji and 12 = 2^^^j2, and then we define 
the corresponding class polynomials as follows: 



(2.4.2) 



Ux) = \{{x-]i{T)), i = l,2,3. 



The advantage of using these is that it is clear from their definition that they satisfy the hypotheses 
of our Main Theorem. 

2.5. Rosenhain normal form. While Igusa's approach to the moduli of genus 2 curves is 
through the study of invariants of sextics, we remark that after a finite extension of the base we 
may always arrange the six ramification points to contain {0, l,oo} and arrive at an equation of 
the form 

(2.5.1) C:y^ = x{x- l)(x - Ai)(x - \2){x - A3), 

called the Rosenhain normal form of the curve C. The Aj's are in a finite field extension of the 
field of definition of the curve and are determined up to the action of the stabilizer of the triple 
{0, 1, 00} in PGL2 a group isomorphic to the symmetric group Sj, on 3 letters. If r G i52 is the 
period matrix of the polarized abelian surface Jac(C), then, up to projective equivalence we may 
take the A,- to be 



Ai 



e 


1 


.0. 


{r? 


e 





.0. 


{r? 


e 


[01 

1 


.0. 


(r)2 


e 


"O" 



.0. 


(r)2 



e 


"1" 




.1. 


(r)2e 


■ 1' 

1 



.0. 




e 





1 


(r)2e 


"O" 

1 


.0. 


(t)2 



e 


"i" 




.1. 




"i" 




.0. 




e 





1 


(r)2e 


oooo 


(t)2 



(See Igu2 p. 179].) Note that if C is defined over some number field and the equation (j2.5.ip 
is over that field then the Aj appearing there are algebraic numbers. When obtaining a triple of 
Aj from the period matrix the Aj are in fact algebraic. This is a consequence of the fact that the 
ratios of the theta functions appearing above are modular functions defined over Q(z) (say) and 
full level 2. 
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The theta functions used here are Riemann's theta functions: Let e, e' G Q^, t € Sjg, and define 
the Riemann theta function with characteristic [ ^/ ] to be the power series 




where e(x) = e^'^*^. It can be shown that this series defines a holomorphic function i^^ — t- C. 
If e, e' € they are called an integral characteristic. If *ee' = (mod 2) they are called even, 
and else odd. It turns out that for an odd characteristic the theta function vanishes identically, 
and for even characteristic G [p] (r)^ depends only on (e,e') modulo Z^^. For g = I this gives 
us 3 (squares of) theta functions and for g = 2 this gives us ten (squares of) even theta functions. 

One can show that each [ ] (r) to a large enough even power 2r is a Siegel modular form of 
weight r of some level. For g = 1, it goes probably to Jacobi that 

[ ^1 ] even 

where c is a constant and A = — Eq is the classical modular form of weight 12. Recall that 
the divisor of A is the cusp of SL2(Z)\i5- Igusa proved for g = 2 that 

G:=2-i2 H e[:,]{rf 

[ p ] even 

is a Siegel modular form of level Sp(4,Z) and weight 10. The factor of 2 is introduced to ensure 
integral Fourier coefficients with gcd 1. The divisor of @ is precisely the Humbert divisor Hi 
(with multiplicity 2). See ^ 

Finally, we make some remarks as the utility of the Rosenhain normal form for generating curves of 
genus 2 with CM. Given a primitive CM field K, it is an easy matter to enumerate representatives 
for the ideal classes of K and so to get, by varying over all CM types, the period matrices whose 
classes modulo r(2) give all the CM points of level 2 associated to this field. The modular forms 
used above are of level 2 and so, by evaluating them on these period matrices, we get a collection 
of equations C : = x{x — l)(x — Ai)(rE — A2)(x — A3) defining, in particular, the isomorphism 
classes of all the curves of genus 2 whose Jacobians have CM by Ok- For a generic period matrix 
r S the Ai(r) live in a very large extension L of the field of definition, say Lq, of the curve. 
Let V = L{y/\i, \/A2) "v/Aa)) note that [V : L] < 8. Implicit in the fact that Aj G L is that all the 
2-torsion of Jac(C) are defined over L\ because under the embedding C — )■ Jac(C) (taking the 
point at infinity as the base point) the images of the Weierstrass points generate the 2 torsion 
subgroup of Jac(C). For a generic curve, the extension L' /Lq has degree ft Sp(4,Z)/r(2) = 720. 
However, in the case of complex multiplication, the field of definition of C can be taken Hk* , the 
Hilbert class field of the refiex field, and so the Aj generates the ray class field of conductor 2 of 
K* . In fact, since Sp(4,Z)/r(2) = Sp(4, F2) = Sg, the symmetric group on 6 letters, and since 
the maximal abelian subgroups of have degrees 5,6,8,9, it follows that [L' : Lo]|a for some 
a G {5,6,8,9}. This can be utilized to construct curves over a number fields whose Jacobians 
have CM. 

2.6. Ramification locus of ^,Ar(C) — t- j2^^i(C). Let be a positive integer. We denote 
by ■^2,N the moduli scheme of principally polarized abelian surfaces with symplectic level N 
structure over Spec(Z[("7v, 1/-^])- -2^2,1 ® '^[Cn-, 1/-^] is the quotient of £^2,N by the finite group 
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Sp{4:,7j/N7j) / {±14} . We denote the by -ffA.Ar the Humbert surface of invariant A (a discriminant 
of real quadratic order) in £/2,n{C). It is irreducible for = 1, but reducible for > 1. 

Let A'^ > 3, so the representation Aut(^, A) — )• Aut(^[3]) is faithful. The ramification locus of 
tttv : =8^,v — ^ -^2,1 is clearly the locus of points x on s^2,i with non-trivial stabilizers, which, by 
the moduli interpretation, correspond to principally polarized abelian surfaces {A, A) such that 
rAut(A, A) 7^ {!}, where rAut is the reduced automorphism group (namely the automorphisms 
If : A ^ A such that <p*X = A, taken modulo {±1}). Furthermore, in that case, any point in the 
fibre over x has the same ramification index, equal to the cardinality of rAut(74, A). 

We say that a component of the Humbert divisor -ffA,v in ■^2,n{'C) is ramified if it is contained 
in the ramification locus and otherwise we say it is unramified. If every component of -ffA.Af is 
unramified then 

7r^(-f^A,i) = Ha,n- 

Lemma 2.6.1. If A 7^ 1,4 every component ofHA,N is unramified. If A G {1,4} the ramification 
index along each component of H/:^^^ is 2. 

Proof. Suppose first that A is not a square. In this case, every abelian variety (A, A) parameter- 
ized by -ffA.Af has real multiplication by a real quadratic order of discriminant A and, generically, 
only by that order. Thus, generically, Aut{A, A) = {±1} (as the Rosati involution is the identity). 
That resolves this case. 

Suppose now that A is a square, but A 7^ 1. Then, except of codimension one subset, the 
points of i^A,v correspond to curves C of genus 2 affording a map of degree A, C — )• to an 
elliptic curve E, that does not factor non-trivially thorough another elliptic curve |FKj . 

Prom Igusa's classification of Aut(C) we deduce that there is only one 2-dimensional family of 
curves of genus 2 with a non-trivial reduced automorphism group. This family, as one observes, is 
exactly the curves C of genus 2 allowing a map of degree 2, C — ?• E', to an elliptic curve, ramified 
at exactly two points of E. This family is the Humbert divisor H4^i, and in particular, we have 
proven the lemma for all cases but A = 1. 

It is easy to see that for a generic pair of elliptic curves Ei, E2 we have Aut(-Ei x £'2, Ai x A2) = 
{(ibl,ibl)}. Thus, our proof is complete. □ 

2.7. Existence of good models for abelian varieties with complex multiplication. Our 

purpose is to prove the following lemma. 

Lemma 2.7.1. Let (A, X) be a g-dimensional principally polarized complex abelian variety with 
complex multiplication by the ring of integers Ok of a CM field K of degree 2g, l : Ok — ^ End(yl). 
Let he the associated CM type and K* the reflex field associated to K and Assume that $ 
is a simple CM type. Let p be a prime of K* and R the completion of the ring of integers of K* 
by p. Then {A, A, i) has a model with good reduction over an unramified extension O of R. 



Proof. As is well known ( |Langl Ch. 3, Thm. 1.1]), (A, A) has a model over Hk*-, the Hilbert 



class field of K* , corresponding to an ff^^* -rational point a £ -^g,!- In fact, a is defined over the 
field of moduli M of {A,i,\) which is contained in Hk*- Let A/^ > 3 be an integer prime to p. 
Let a be a point of s^g^N lying above a. The field of definition of the point a is contained in 
Hk*{A[N]) and is equal to the field of moduli M[A^] of (^, i. A, A[A^]), which, since the moduli 
scheme is a fine moduli scheme, is also the field of definition of {A, l, A, A[A^]). 

Let -s^g i\f be a smooth toroidal compactification of £^g,N over Spec(Z[CAr, 1/A^]). It carries 
a semi-abelian variety X over it. Choose a prime ^ of M[A^] over p. Since the morphism 
■s^g N — ^ Spec(Z[(^Ar, 1/A^]) is proper, the morphism Spec(M[A^](p) — £/g^N ^ -^g N induces by 
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the valuative criterion a morphism /3 : Spec(C') — )• -s^y ^y, where O is the valuation ring of M[A'^]q3. 
Then I3*X is a principally polarized semi-abelian variety over O whose generic fiber is {A, A) ® 
M[A^]cp {i extends automatically). As is well known, since [K : <^ = 2g > g, the toric part of the 
mod ^ reduction of f3*X must be trivial and so A ® M[A^] has good reduction modulo 

We claim that the extension M[N]/K* is unramified at p and so O is an unramified extension 
of R. This follows from the main theorems of complex multiplication. In fact M[A^] is an abelian 
extension of K* corresponding to a precisely described group of ideals and has conductor dividing 
A^. See Langl| , Chapter 5, Theorem 4.3 (use also Theorem 3.3). Thus, the extension M[N]/K* 



is unramified at p. □ 

Remark 2.7.2. In fact, using more subtle results in complex multiplication due to Shimura, one 
can conclude the existence of a model over Hk* with good reduction at p. See [Gor^ Proposition 
2.1]. 

Remark 2.7.3. The abelian variety {A, t. A) has a model over Hk*, but this model is not unique. 
In fact, the forms of {A, l, A) over Hk* are classified, up to Hk* isomorphism, by the Galois 
cohomology group -^^(0//^^. , Aut(A, i. A)), where Ghj^* is the absolute Galois group of Hk* 
and Aut{A, l, A) are the automorphisms commuting with the action of K and preserving the 
polarization. It is easy to see that Aut(^, l, A) is equal to fiK, the group of roots of unity lying 
in K. Typically this group is {±1} and the forms correspond to quadratic twists, but it may be 
larger. It can be /xt for any t such that (p{t)\2g. On the other hand, with accordance with the 
fine moduli space property {A, t, A, ^[A^]) has no forms as Aut((^, l, A, 74[A^])) = {1} for A^ > 3. 



3. Reduction type of abelian surfaces with complex multiplication 

Our goal in this section is to study the reduction type of an abelian surface with complex multi- 
plication by a field K modulo a prime ideal of the field of definition, lying above p, as a function 
of the decomposition of the prime p in K 

3.1. Combinatorics of embeddings and primes. Let K he a, number field and A^ its normal 
closure over Q. Let G be the Galois group Gal(A^/Q), acting on AT by A; i—)- g{k),g G G, and let 
H = Gal{N/K) < G. Fix inclusions 

ifc: N^C, ipp-. N^Qp. 

This allows us to make the following identifications: 

Hom(A', C) = (/7c o G/H, Rom{K, Qp) = ipp o G/H, 

where a left coset gH gives the embeddings <pc° g and tpp o g. We then have an identification 

Hom(A:,C) = Hom(A:,Qp). 
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Let L D A'^ be a finite extension and cfioose an extension of 
diagram: 



to L. We have the following 



L 



N 




Let *p be the maximal ideal of Q^. The choice of tpp provides us with a prime ideal pL^i := ip~^ 
of L, and so with prime ideals p7v,i = n of and pK,i = pL,i H of K. Let D be the 
decomposition group of pTv^i in and / its inertia group. Let e = ji /. The primes ideals above 
p in A^ are in bijection with the cosets G/D: 

aGG/D 

The decomposition (respectively, inertia) group of pN,a is D°' := aDa~^ (respectively, I" := 
ala~^). The primes dividing p in K correspond to the double cosets H\G/D. More precisely, 

pOk= n pS' pK,a = a{pN,i)nK, 

HaD(^H\G/D 

where, by Lemma 13.2.11 below. e{a) = [I" : I" H]. 

Let a G G; it induces a homomorphism (ppoa: K ^ that depends only on aH. It therefore 
defines a prime {(pp o a)~^{^) of K, or more precisely [^p\k ° ot)~^i^). We have 

(3.1.1) {^p\k o a)-\^) = {a-\p\-^\^)) nK = a~\pN,i) nK = pj,^^-,. 

That is, the coset aH corresponding to an embedding K — t- Qp induces the prime corresponding 
to the double coset Ha^^D. (This "inversion" is a result of our definition of pN,a as a{pM,i)-, as 
opposed to a~^{pN,i)-, made in order to conform with jGorj .) 

Suppose that we are given a finitely generated torsion free Oi-module M on which Ok acts as 
endomorphisms. Then Mq = M 0Ol,'pc C is a finite dimensional vector space over C, which is 
an Ok C = K (8)q C module. We have then a decomposition 

(3.1.2) Mc = ®^mom{K,c)Mc{(p) = Roma(zG/HMc{a), 

where Mc{ip) is the eigenspace for the character y?: K ^ C, where, using the identifications 
Hom(K, C) = }lom{K, N) = G/H, we have let Mc(a) := Mc{<fc ° «)• We assume that each 
eigenspace is either zero or one dimensional and so we get a subset 

<!> C Hom(iv:,A^), 

corresponding to the non-trivial eigenspaces. We call $ a "CM type", although none of the fields 
appearing in our discussion so far needs to be CM. 
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On the other hand, we also have the finite dimensional Qp-vector space Mp := M 0Ol,vp 'Qp' 
grace of the homomorphism ipp-. L ^ Qp, which is an Ok '^z Qp = K (g)Q Qp-module. Since all 

the homomorphisms K — )■ Qp factor as K ^ N Qp, we have a decomposition, similar to the 
one in (|3X2]) . 

(3-1.3) Mp = e^gHom(i^,Q,)^p(v) = (BaeG/nMpia). 

Moreover, for each a £ G/H there is a one dimensional L-subspace Mi(a) of := M ®Ol ^ 
such that 

Mc(a) = Ml{oi) C, Mp{a) = Miia) ^l,^^ %. 

And so, in the obvious sense, <5 becomes a "p-adic CM type" as well. 

Now, the decomposition in (|3.1.3p can be packaged as follows: We have Ok ®i = ®p\pOKp 
and thus K ®qQp = ®^\p{Kp (gjQ^ Qp), or 

This decomposition induces a decomposition 

(3.1.4) Mp = e„eH\G/DMp,„. 

Note that, due to (j3.1.ip . the relation between (jS.l.Sp and (j3.1.4p is (sic!) 

(3.1.5) Mp(a) C Mp^„-i. 

3.2. The case of quartic fields and Dieudonne modules. Let be a CM field of degree 
four over the rational numbers and let A be a principally polarized abelian surface with complex 
multiplication by Ok, CM type $, defined over a field L and having everywhere good reduction. 
Let K* be the reflex field. We assume that L contains a normal closure N of K and let G = 
Gal(A^/Q). Thus, our notation conforms with the one in the previous section. 

Let be the totally real subfield of K. Let p be a prime number. Our purpose is to determine 
the reduction A of A modulo a prime ideal pL of L. It follows from results of C.-F. Yu |Yuj that 
the Dieudonne module of A is determined uniquely by $ and the prime decomposition of p in 
K (and not just in the case of surfaces). A fortiori, the Ekedahl-Oort strata in which it falls is 
determined. In the case of surfaces, the complete information is contained in two numbers 

a{A) = dimHomp^(ap,i<g)Fp), f{A) = logp tJ^[p](Fp), 

the a-number and /-number. 

We the situation more explicit that in loc. cit., and provide a self-contained proof in our case. 
We will have several fields to consider A^, K, K* (the reflex field determined by K and $), and 
their totally real subfields and K*~^ , respecively. The basic information is the factorization 
of p in A^. As above, we flx a prime ideal p = pN,i = pL N of N . The decomposition of p in 
each fleld is determined by the pair of subgroups {I,D), where / is the inertia group of p in A^ 
and D is its decomposition group. The pair of subgroups {I,D) of Gal(A^/Q) must satisfy the 
two restrictions: 

• I<D; 

• D/I is a cyclic group. 

As explained above, having chosen p, we may index the primes dividing p in A^ by coset represen- 
tatives for D in G. If these coset representatives are a,b,c, . . . (so G = aD U hD U cD U . . . ) then 
we write pO^ = V% 0!^% b^'h c " ^ where e = '^I and pj\[,a ■= o,{Pn) (and in particular, pN,i = p). 
If the primes appearing in the decomposition of p in A^ are determined by G/D then the primes 
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appearing in the decomposition of p in a subfield A'^ of N, corresponding to a subgroup H of G, 
are determined by H\G/D. As above, we shall denote such primes by pj^H ^ where j; is a repre- 
sentative for a double coset HxD. (This is consistent with the previous notation for H = {!}.) 
The following lemma is used to determine ramification in subfields. 

Lemma 3.2.1. Let Q C B C N be three number fields where N/Q is Galois with Galois group 
G. Let B correspond to a subgroup H of G. Let pN be a prime ideal of N , ps = Pn B and 
pQ = pN Q- Let L[Pn) be the inertia group in G. Then, 

<Vb/Pq) = [L{Pn) : L{pN)r\H] 

and 

e{pN/pB) = U{VN)r\H. 
Proof. This is Lemma 3.3.29 in |Cohj . □ 

The main tool for studying the reduction A = A (mod p^) of the abelian surface A is the 
following. Let D be the Dieudonne module of A\p\ over Fp. The formalism of the previous section 
will be applied to the algebraic first de Rham cohomology of A/L, serving as M in the previous 
section, which by base change gives us the complex de Rham cohomology of A as well as the 
crystalline cohomology of A, of which D is the reduction modulo p. 

The o-number and /-number of A can of course be read from D. The Dieudonne module has a 
decomposition relative to the 0^^+ action and a refined decomposition relative to the Ok action. 
Using Pk+ to denote a prime ideal of Ox+ above p and similarly for px, we have, by virtue of 
the decompositions 0^+ ®1ip = ©p^+ Oa'+.Pj^+ > ®'^p = ®pk^k,pk^ induced decompositions 

o = ®^^^n{pK+), H^K+) = ep^,|p^+o(Pi^). 

Here each D(p^+) is a self-dual Dieudonne module of dimension 2e(p^+/p)/(p;^+/p), which is 
then decomposed in Dieudonne modules D(Pa') of dimension e{pK /p)f{pK /p)- On D(p/^+) there 
is an action of O^+ p^^ (g) Fp = ©aFp[t]/(t'^), where the summation is over embeddings a of the 

maximal unramified subring 0^+ p of (^K+,pj^+ into VF(Fp) and e = e{px+ /p). There is a simi- 
lar and compatible decomposition of C'_K,p^ ©Fp. These decompositions induce decompositions of 
the Dieudonne modules D(p^+),D(pA'), such that ID)(px+) = ffial0(pA-+,a),O(pic) = ®Q,D(px,«)- 
D(p^+ , a) is a vector space of dimension 2e(px+ /p), which is a free rank 2 module over Fp[t]/ (f^) 
on which Ok+,p^_^ = p + [^] ^^^^ map a : ^ ^ ^ and vr, which is an Eisen- 

stein element, acts via t. A similar and compatible description is obtained for D{pK, ct). Frobenius 
induces maps D (p^+ , a) — D {Pk+ ,croa). 

Implicit in our considerations is the identification of Hom(i^, N) with Hom(if, Qp), where is a 
normal closure of K. This identification is done as discussed in detail above. In particular, we note 
that the subspace n{pK,a) is associated with the prime ideal Pko-^- Since H^{A,^\- ) C D, 

any a € ^ contributes 1 to the dimension of the kernel of Frobenius on D{pK ^-i). This often 
allows us to conclude that Fr^ = on D, which implies a = 2,/ = and, so, superspecial 
reduction. 

Another useful tool to quickly decide some properties of the reduction is the following relation. 
Let K* be the reflex field defined by the CM type of the abelian variety under consideration and 
let be the refiex type. Let pK*,i = pN,i H K*. Then some power of Norm$. (pA'*,i) is equal to 



18 EYAL Z. GOREN & KRISTIN E. LAUTER 



Table 3.3.1. Reduction in the cyclic case. 





/ 


D 


decomposition of p in 
K = K* 


decomposition of p in 
K+ 


a 


/ 


super- 
special? 


1 


{1} 


{1} 




Pk+.iPa-+., 





2 


X 


ii 


{1} 


{1,9'=} 


pK.lpK',.g 


pK+.lPff+.q 


2 





V 


111 


{1} 


G 


Pa',1 


Pk+.i 


1 





X 


iv 




{1,9^ 


PK,lVK.g 


Pk+.iPa-+.<, 


2 







V 




G 


Pk.1 


Pa+.i 


2 





V 


vi 


G 


G 




Pk+.i 


2 





V 



a power of Fr, viewed as endomorphisms of the reduction. One can be more precise (see |Langl| ), 
but we note that this suffices to calculate the /-number of the reduction. 

3.3. K cyclic Galois. In this case K = N = K* . The Galois group is cyclic of order 4, generated 
by 5, say, where is complex conjugation. The CM types are either {1, g}, {g, 5^}, {g^, i?^} or 
{g^ ^ 1}. Since the reduction type does not depend on the way K is embedded in A, namely we 
can compose with an automorphism K ^ K, we may assume that the CM type is {l,g}. The 
reflex CM field K* is K and = {l,g~^}. We have the following possibilities. 



The unramified case appears in [Gor] . but we shall do one case to illustrate our method. Consider 
the case ii. We have a decomposition 

D = D(P;^+,i)eD(p^+J, 

and D(px+^j), i = 1,5, is a two dimensional Fp-vector space that does not decompose further 
relative to the 0^+ action. However, D(pj^+ j) = n{pK,i), because pK+,i is inert in K, and 

B{pK,i) = B{pK,r, a) © B{pK,r,(7 o a). 

Probenius takes lD{pK,i,a) to lD>{pK,i,o-o a), and vice-versa. The CM type is {1,5} and we note 
that g switches pK,i and pK,g- This means that the cotangent space, or rather H^{A, ^^^^p )®f ^ 

¥p = D(Ker Fr), which is an O^-module, is not contained completely in any of D(pK,i)- Thus, 
Frobenius has a kernel on each of D(p/^^j). It follows that Fr^ is zero on each D(pi^^j) and hence 
on D and that implies that a(A) = 2, by a well known and elementary argument and f{A) = 0. 
In case iv we again have 

B = 0{pK+,i)(BO{pK+,g), 

and D(p^+ j) is a two dimensional Fp- vector space that does not decompose further relative 
to the Ox+ action. However, D{px+^i) = D{pK,i) and D{pK,i) becomes a rank 1 module over 
Fp[t]/(t^) by using the Ok action and Frobenius is a module homomorphism. Once more, since 
g permutes Pk+,i and pK+,g^ if follows that Frobenius has a kernel on each of D(p^+ J and since 
the dimension of the kernel of Frobenius is two, it follows that the kernel Frobenius must be 
(t) © (t) C D{Pk,i) © D{pK,g) and Fr^ = 0. 

In case v, after a similar analysis we reach the conclusion that D = Fp[t]/(t^) ©Fp[t]/(t^) 
and that Frobenius, which commutes with the Fp[i]/(t^) structure, permutes the components. 
Whether the kernel of Frobenius is one of the components, or the submodule (t) © (t), we have 
Pr^ = (in fact, taking into consideration the CM type we must have the kernel is (t) © (t), but 
this is not important at present). 
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Table 3.4.1. Reduction in the bi-quadratic case. 





J 




decomposition, of p in 
K = A'* 


dccoiiipositioii of p in 
K+ 




f 
/ 


special? 


i 


{1} 


{1} 


PR-.lpA'.Qi Pi<',;jpK,Q2 


Pk+,iPa-+.c, 





2 


X 


11 


{1} 




Pk,iPa\^ 


Pa+.i 





2 


X 


111 


{1} 


{l,/3} 


P;f,lP/<r,ai 


Pk+.iPa-+.c, 


2 







IV 


{1} 




Pis:,lPK.^J 


Pa+.i 


2 





V 


V 






— 72 

Pjf.iP/<r.3 


Pa+.i 





2 


X 


vi 




G 




Pa+.i 


2 





V 


vii 


{l,/3} 




P/f.lP/C.Ql 


Pa+,iPa+.ci 


2 





V 


viii 


{l,/3} 


G 


pIm 


Pa+.i 


2 





V 


ix 


{1,Q2} 


{l,a2} 


PA-.lPjf.ff 


Pa+.i 


2 





V 


X 


{1,Q2} 


G 


Pjf.l 


Pa+.i 


2 





V 


xi 


G 


G 


pIm 


Pa+.i 


2 





V 



In case vi we conclude that D = Fp[t]/(t'^) and that Frobenius acts as a Fp[i]/(t'')-module 
homomorphism. It follows that the kernel of Frobenius, being an Fp[i]/(t^)-module is (t^) and so 
is the image. Hence Fr^ = again. 

3.4. K biquadratic. In this case K = N is the compositum K1K2 where Ki are quadratic 
imaginary fields. Let K'^ be the totally real subfield of K. Write the Galois group is {1, ai, 02, /3} 
where Ki is fixed by and (3 is complex conjugation. We have the following diagram: 



K 




Ki K+ K2 




Q 

The possible CM types are {1, aj}, {/5, Oj} and twisting the action of Ok by an automorphism we 
may assume the CM type is {1, ai} or {1, 02}. The situation being symmetric we assume w.l.o.g 
that the CM type is {l,ai}. The reflex CM field is Ki and the reflex CM type is {1}. In this 
case A is isogenous to E ®i Ol, or equivalently to E Cgj^i K, where E is an elliptic curve with 
CM by Oki ■ Thus, A is ordinary if p is split in Ki and supersingular otherwise (and in that case 
one still needs to figure out its a number). Now, p is split in Ki if and only if {D,ai) 7^ G. 

Consider for example case vi. After the usual analysis we find that D = ¥p[t]/{t'^) © Fp[t]/(t^), 
where Fr is Fp[t]/(t^) cj-linear and switches the components. Its kernel is then either one of the 
components, or the submodule (t) © (t). In any case, Fr^ = and so a = 2. Cases vii, viii and x 
lead exactly to the same setting. 

In case ix, once again D = Fp[t]/(t^) ©Fp[t]/(t^) but now Fr acts on each component separately. 
A is ordinary if the kernel of Fr is one of the components and is superspecial if the kernel is (t)©(t). 
Since ordinary is not possible, because p is inert in Ki (or, we can argue by using the CM type 
that Frobenius has a kernel on each component), we are in the superspecial case. 

In case xi we find that D ^ Fp[f]/(t'') and we must have that the kernel of Frobenius is the 
submodule (t^). It follows that Fr^ = 0. 
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3.5. K non- Galois. In this case the normal closure of is a Galois extension N/Q of degree 8 
and Galois group -D4. As above, we view N as embedded in C. K is the fixed field of a non-central 
involution we call x. Let y be an element of order 4, then is complex conjugation and xyx = 
= y^- We identify Hom(/f, C) with {1, y, y'^,y^} and the CM types are {1, y}, {y^,y^}, {1, y'^} 
and {y^,y^}- We may twist the action of K by complex conjugation and so assume that the CM 
type is {!,?/} or {l,y^}. If it is {l,y~^} we can change the presentation of our group by using 
the generator y~^ instead of y. We can therefore assume that K is fixed by x, the Galois group 
is {x,y\x'^ ,y^ , xyxy) and the CM type is {1,2/}. The reflex CM field K* is then fixed by {l,xy^} 
(follow the recipe in [Langl Ch. 1, Theorem 5.1]) and the reflex CM type is {l,y~^}. 
We have the following diagrams of fields and subgroups: 



{l,x,xy ,y-} 




{hxy^} 



{1, xy, y^'^xy^} 




The analysis of the reduction of A proceeds along the same lines as above. Namely, one considers 
the decomposition of the Dieudonne module as a module over Ok iX) Fp and the induced action 
of Probenius, which is 1 (8) o"-linear, so to say. In most cases, this suffices to determine the a and 
/ numbers, but in certain cases one needs to decide between two possibilities, and there the CM 
type matters. The interpretation of the CM type mod p is done through the formalism of ^3.11 

For example, referring to the table, in case viii we find that D = Fp[t]/(t^) © ¥p[t]/{t'^) and 
Frobenius acts a-¥p[t]/{t'^) linearly (meaning, it acts cj-linearly on ¥p and commutes with t) on 
each component. The kernel, a-priori could be one of the components or the submodule (t) © (t). 
Taking the CM type into consideration, we see that Frobenius has a kernel in each component 
and so its kernel is (t) © (t). It follows that Fr^ = 0. Case x is the same. 

Case ix is easier as in this case D = Fp[t]/(t^) ©Fp[t]/(t^), where Fr is acting cr-Fp-linearly, but 
permutes the components. The kernel is either one of the components or the submodule (t) © (t) 
and, regardless, Fr^ = 0. Case xi is the same. 



Table 3.5.1. Reduction in the non Galois case. 





/ 


D 


decomposition of p 
in N 


decomposition of p 
in K 


decomposition 
of p in 


decomposition of p in 
K* 


decomposition 
of p in K*'^ 




a 


/ 


ss? 


i 


{1} 


{1} 




PK,lP/f.yPA-,y2P;f j,3 


pK+,lPA'+.y 


pK',lPK*,ypK*,y2PA--«,y3 


PK* + ,lPK*+,y 


P-ff,ipK,a3 





2 


X 


ii 


{1} 


(x) 


PJV,lPAf,yPiV,a2Pjv,H3 


pK.lpK.yPjf y2 


Px+aP/c+.y 


PK»,lpK*,y2 


Pk' + ,i 


PK.iP^f.y 


1 


1 


X 


iii 


{1} 


{xy) 


P]V,lPAf,yPiV,a2Pjv,a3 


PK.lP/f.y2 


Pk + ,1 


PK',lPK*,ypK*,B3 


Pk' + ,iPk» + ,h 


P 


2 





\/ 


iv 


{1} 




PAf,lPiV,yPjv,a2Pjv,a3 


pK,lP/f,yPj^-_y3 


PA-+,lPA'+,y 


Pk* ,iPk* ,y 


Pk' + ,i 


PK,1PJ^^3 


1 


1 


X 


V 


{1} 




P]V,lPiV,yPjv,y2Pjv,y3 


PK,lPif,y2 


Pa-+,i 


PK»,lpK*,yPK*,B2 


PK'+,lPK*+,y 


pi-.i 





2 


X 


vi 


{1} 


iv') 


PAf,lPjV,^pN",ypN",xy 


PK,1P A.y 


pA-+,lP/f+,y 


Pk* ,iPk* ,y 


Pk* + ,iPk* + ,h 


p 


2 





\/ 


vii 


{1} 


iv) 


PAf,lPjV,:c 


PK.l 


Pk + ,1 


Pk* ,1 


Pk* + ,i 




1 





X 


viii 


iv') 


iv') 


Pw.lPw.sPw.yPw.^cy 


»2 ^,2 

PK,lP/f,y 


PK+,lpRr+,y 


»2 „2 

PK*,lPK*,y 


PK'+,lPK*+,y 


PK,lPK,y 


2 







ix 


iy') 


iv) 


2 2 


Pk.i 


Pa+,1 


2 

Pkm 


Pk' + ,i 


P 


2 





\/ 


X 


iv'} 




„2 -2 
PiV,lPjV,y 


PK.lPK.y 


PA-+,lPA'+,y 


Pi.,1 


Pk' + ,i 


P 


2 





\/ 


xi 


iv'} 


{xy.y^} 


PiV,lPjV,y 


Pk.1 


Pa+,1 


PK',lP/<*,y 


PK'+,lPK'+,y 


P 


2 







xii 


(x) 


(x) 


„2 2 2 2 
PjV,lPiV,yPjv,y2PAr,y3 


pK,lPK,yPjf,y2 


PK+,lP/f+,y 


PK*,lpK*_y2 


Pk' + ,i 


PK,lPK,y 


1 


1 


X 


xiii 


(x) 




PAf.lPiV.y 


PK.lPK.y 


PK+,lP/f+,y 


Pkm 


Pk' + ,i 


P 


2 





\/ 


xiv 




i^y') 


PN,lPw,ypN.y2P^_y3 


PfC.lP'^.yPjf.yS 


pA-+,lPA'+,y 


«2 „2 

PK',lPK*,y 


Pk' + ,i 


PK.lPj,-_y3A 


1 


1 


X 


XV 




(x,y') 


PiV,lPjV,y 


PfC.lPif.y 


pA+,lPA'+,y 


Pk*,i 


Pk' + ,i 


P 


2 







xvi 


[xy) 


i^v) 


PN,lPN,yP«.y2PN,y3 


Pk,iPk.b3 


Pk+,1 


PK*,lPK-,ypK*,y3 


PK'+,lPK*+,y 


PA',lpK_y3 A 


2 







xvii 


{xy) 




„2 j^2 

PjV,lPjV,y 


Pk.i 


Pk + ,1 


PK*,lPK*,y 


PK*+,lPK*+,y 


p 


2 







xviii 


i^y^) 


{xy") 


„2 2 2 2 
PjV,lPiV,yPjv,y2PN,y3 


P/C,lP/f.y 


Pk+,1 


Pk» ,iPk* ,yPK* ,y2 


PK'+,lPK*+,y 


pI'.iA 


2 







xix 


(xy) 


{xy.y^) 


Pw.lPw.y 


Pk.i 


Pk+,1 


Pk* ,iPk* ,y 


Pk' + ,iPk' + ,h 


P 


2 







XX 


(y) 


(y) 


4 „4 


Pk,i 


Pk+,1 


4 

Pk* ,1 


^2 

Vk' + .i 


.-2 

Pk,i 


2 





\/ 


XX i 


(y) 


G 


4 

Pjv,i 


pIm 


Pk+,1 


p1-m 


_2 

Pk' + ,i 


P 


2 







xxii 


{x,y') 


{x,y') 


PAf,lPAf,y 


»2 ^,2 

Px.lPK.y 


PK+,lPK+,y 


»4 

Pk',1 


»2 

Pk- + ,i 


PK,lPK,y 


2 







xxiii 




G 


_4 

P]V,1 


Pk.i 


Pk + ,1 


pi-.,i 


Pk* + ,i 


P 


2 







xxiv 


{xy, y"^) 




4 4 
PiV,lPjV,y 


4 

Pk,i 


Pk + ,1 


2 2 
PK«,lPK*,y 


Pk* + ,iPk* + ,h 


pLi 


2 





\/ 


XXV 


{xy, y') 


G 


PiV,l 


Pk,i 


Pk+,1 


Pk',1 


Pk' + ,i 


P 


2 





\/ 


xxvi 


G 


G 


4 

PjV.l 


Pk,i 


Pk+,1 


p1-m 


Pk' + ,i 


P 


2 
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3.6. Examples. Take a curve C of genus 2 over Q (to simplify). Given a prime p at which C 
has good reduction C, one has a simple method of writing down the Hasse Witt matrix M of 
A = Jac{C) and so deciding the a number and / number of A: The / number is the rank of 
M^^M and the a- number is the co-rank of M. In general it is hard to decide the reduction type 
by examining M, but in certain cases we can do that and compare our results with the results 
above when A = Jac(C) has complex multiplication. 

Let C : = f{x), where /(x) = + a^x^ + • • • + oq be a hyperelliptic curve and write 



Then the Hasse- Witt matrix M is given by 



Cp-l Cp_2 
C2p~l C2p-2 



and M(p) is 



-2p~2, 

Exactly the same recipe works if f{x) is a sextic. See |IKOt p. 129] 



\^2p-l '^2p- 



3.6.1. Let C : y"^ = x^ + 1. The curve has good reduction outside 2-5. The Jacobian has 
complex multiplication by Q(C5) and the automorphism group of the curve in characteristic zero 
is ^10. The coefficient of in /(x)^^"^)/^ is if 5 f n and, for n not larger than 5(p — l)/2 such 
that 5|n, is We divide the analysis to several cases: 



If p = 1 (mod 5), M = I /(p-i)/2\ ) has rank 2 and we conclude that A is 

ordinary. Note that p splits completely in this case. Namely we are in case i of the cyclic 
Galois case. 

If p = 2 (mod 5),p > 2, M = ° ((p-2)/5) ) has rank 1 and M(p)M = 0. Thus, / = and 
a = 1. This is a supersingular, but not superspecial reduction, in accordance to case iii. 
If p = 3 (mod 5), M = {Ir^lys) o) ^^^'^^ ^ ^^'^^ M(p)M = 0. Thus, / = and a = 1. 
This is a supersingular, but not superspecial reduction, in accordance to case iii again. 
li p = —1 (mod 5), M = ( [] [j ) has rank and we have superspecial reduction, in accor- 
dance with case ii. 

p = 5. It follows from Igusa's classification of genus 2 curves with many automorphisms 
[Igul §8] that the reduction of a stable model of = + 1 modulo 5 is isomorphic, 



possibly after base change, to the curve = /(x), where /(x) = x(x — l)(x + l)(x — 2)(x + 
2). That is, since the characteristic is 5, /(x) = x^ — x. Then /(x)^ = x^'' — 2x^ + x^ and 
the Hasse- Witt matrix is the zero matrix, giving us superspecial reduction. This agrees 
with case v. 

In characteristic 2, Igusa's classification gives us the model — y = x^. According to our 
table, since we are in case iii, this curve should be supersingular, but not superspecial. 
The fact that the curve is supersingular, which in genus 2 is equivalent to / = 0, follows 
from the theory of Artin-Schreier coverings, c.f. |PZ1 Lemma 2.6]. According to [IKO^ 
Theorem 3.3] there are no superspecial non-singular curves of genus 2 in characteristic 2. 
Therefore, we have supersingular and not superspecial reduction. 
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3.6.2. Consider the curve = -8x6-64x^ + 1120x^ + 4760x^-48400j;^ + 22627x-91839, which 



has complex multiphcation by the ring of integers oi K = Q(V-65 + 26\/5) by [WaSI] . The field 
is a cyclic Galois extension with a totally real field = Q(\/5). Its discriminant is 5^ • 13^. The 
prime 5 decomposes as p^^+ = pl^- and belongs to case vi, the prime 13 decomposes as = 
and belongs to case v. In any case, we have superspecial reduction. And, indeed, in both cases one 
finds that the Hasse-Witt matrix is identically zero modulo the corresponding prime. For example, 
for p = 5 we have f{xf = 64x^2 _^ io24x" - 13824x1° - 219520x9 + 1419520x^ + 16495568x'^ - 
87185232x'^ - 398328128x^ + 2352249680x'^ - 3064600880x3 + 9401996329x2 - 4156082106x + 
8434401921 and the Hasse-Witt matrix is (^ifS" "TST") = (mod 5). 

3.6.3. Cases (v) and (vi) in Table 3.3.1 for Galois cyclic fields. Examples 1 and 2 below demon- 
strate cases (v) and (vi) in the table for Galois cyclic fields. For both, we take the Galois cyclic 
field K = Q[x]/(x'^ 238x2 833), with real quadratic subfield Q(\/T7). It can be constructed by 

adjoining \/— 119 -|- 28\/T7 to Q. The class number of X is 2 and the field discriminant is 7"^ 17^. 
The three Igusa Class polynomials are: 

2 3^'^ • 11 • 163 • 4801 • 712465984819 • 152160175753014902257305649143422239021984895543 
hi{x) — X H 



223 . 76 . 4312 . 17912 



h2ix) = 



■ 62273'' • 173166943° 
2 . 712 . 4312 . 17912 



• 5 • 967 • 199763665249568296384949088855973069605073 3^^ • 5" • 19^ • 191 • 62273-" • 173166943'' 



29 . 73 . 438 . 1798 26 • 7« • 438 • 179» 



2 3- 1823 • 8197340996395223625771218888046149724668749 
ha(x) = X ~\ 



211 . 73 . 438 . 1798 

3^** • 359 • 1667 • 1811 • 2281229974265082675220366841972155717537 



210 . 7s . 438 . 1798 

Example 1 (Case v) The prime 7 decomposes in K as the square of an inert prime with inertia 
degree 2. Modulo 7 the class polynomials reduce badly, since 7 is in the denominator. The two 
CM curves each reduce to a product of elliptic curves with product polarization modulo 7, and 
the Galois action takes one curve to the other. Both have superspecial reduction. 

Example 2 (Case vi) The prime 17 is totally ramified in K. Modulo 17 the reduction of the 
Igusa class polynomials is: 

hi{x) = (x + 13)2 (mod 17), /i2(x) = (x + 12)^ (mod 17), h^ix) = (x + 2f (mod 17). 

Taking the absolute Igusa invariants [ii, ^2) ^3] = [~13, —12, —2] modulo 17, we recover a 4-tuple 
of Igusa-Clebsch invariants [h, h, Iq, ho] = [1)14,8,13] via the formulas: I2 = 1, ho = 12/h, 
I4 = i2 • Iio/^l 1 h = is- ho/I^- Using Magma's implementation of Mestre's algorithm, we obtain 
a genus 2 curve C : y'^ = x^ + 16 with these invariants over F17. Taking /(x) = x^ + 16 (mod 17), 
we compute the {p — l)/2 = 8*'^ power and compute the Hasse-Witt matrix. The only non-zero 
coefficients of / are for terms whose degree is (mod 6), so the Hasse-Witt Matrix is zero and 
the reduction is superspecial. 
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3.6.4. Cases (xii), (xiv), (xvii) and (xix) in Table 3.5.1 for non- Galois fields. In Examples 3 and 
4 below we deal with cases (xii) and (xiv) (Example 4) and cases (xvii) and (xix) (Example 
3) in the table for non-Galois fields. We work with a non-Galois quartic CM field, given by 
K = Q[x]/{x^ + 134x2 + 89) with reflex field given by K* = Q[x]/{x'^ + 268x^ + 17600). The class 
number of X is 4 and the discriminant is 2^11^89. 

For typographical reasons we list the class polynomials in modified form. To get the class 
polynomials hi{x) from the polynomials h*{x) listed below, divide by the leading coefficient in 
each case. 



hi = 467861685008274198315825008595700654800896648612454642253063065763346063674621433392530889250338077545166015625 • + 

555449149845517528201830854630774702288460206836540032347806689557044680668121067380364116957025544252246618270874023437500000 • x'' + 
184033686764733003916214393323122175930726657165358821209777937427864516170252466041678857284459287923047251104058697819709777832031250000000 • x'^- 

18532528196713610966248735059989496921744294218655209931046129134295796866360219594850246272816241093321185745310256539534492913064849853515625000000000- 

149517615773862216077075501785526135664390163794144774072964515539112873485 
177946865799467841097175021951747554258225537368778725711443911431489057223000000000000 • x^- 
274500212787786320363174922451987418656288895564254168526715333725750375585 
56384959106460164764658831329000379776543259072657572814515177392240269322428312127339426217984 • x^- 
1297531069082446204942804872389223658522300816123923235450253734042421899655 
805930017719515089898192145168479582847645622244801024566788907131236811092595248135449429095219200000 • x^ + 

75816198120430164253210000030177809833640567679756337667150872417366816696541 
96164395918854519565530006696018114342720043906982109112415240533721325054782428254517780807680000000000 • x- 
166561076259218874524380391618627812459200629952377728540602961024102700278352 

475504124640248501826031024603695578842862255022395446214265265991340473323825199368431179137024000000000000000 



/i2 = 122620993224533990854266979572168589900407195091247558593750000 • x^ + 

7485929269991071436519019319213472872675919432653818688502883911132812500000 • x'' + 
127911590573429429764061252422626647909635036233546648623604176763112582318377685546875000 • x"- 
432801469302398970120563934143486307948625635434432325277226168869895543943151085803437889746093750 • x'^ - 
70989757220371345897539040783507004210240989969604889311893737913941059181926255773255664903749716042965625 • x^ + 
141214583953749258746190038912978215937828708913783023311482635400978729488802928890913822935905126587220991510912 • a:'''- 
324730974425347314917488050857215655038539099494418111993188797560893578833446457406316467999877717129727990440513280000 • x^ + 
2878258800484146973496313274835799307245769049641717521354166360884626643674126222273800205511215767305294130902374400000000 • 2;- 

8757766750510816031715743862941216509133894670889936799087401365869157766568945511079523707916023330470602373237659904000000000000 



31390974265480701658692346770475159014504241943359375000000000000 • + 

493348323893392512322187882201836480657190909721221154566235351562500000000000 • x'' + 
2168443965418989986038492688067403045710941961035989372240912887706777245531152343750000000 • x"^- 
2302525585957788818152082352653829396337430793844914883168947610481921539535736987830563608984375000 • x^- 
152380762091374020434799837277117715974184875809865052975561585447684346918113356183254740900302324932628125 • x^ + 
101261095338271190490530687171870069034863165796195122032131006101920226887769776012517741443429566675432329475648 • x^ - 
82394230890068050809147635660557623685629965618893227966125666811860080407429030642077770538444660191227910486571712000 • a;^- 
1926409131567661484196961498816000531174411060031335222220813078857194020390371535396618981891327471335621587834624000000 • 

1870374669751414608923737345184889994628232369194056109733545677638411383291159282002508930826987969131561815775577216000000000 
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Example 3 (cases xvii, xix) The prime decomposition of 11 in is such that it is ramified 
in and the prime above it in is inert in K. Further, 11 is spht in K*~^, and mixed in K* 
(one degree-one prime ideal with ramification index 2, and one unramified prime ideal of degree 
2). The prime 11 appears in the denominator, so at least one of the curves with CM by K is 
superspecial. 

Example 4 (cases xii and xiv) The prime decomposition of 89 in K is mixed: one ramified 
prime of degree 1 and two unramified primes of degree 1. It is split in , ramified in K*'~^, and 
that prime in K*'~^ then splits in K*. Modulo 89 the class polynomials factor as a product of the 
squares of two degree-2 polynomials: 

hi = (x^ + 17x + dfix"^ + 18x + 25f (mod 89) 
h2 = (x^ + 37 X + 67) 2 (x^ + 692; + 57 f (mod 89) 

/i3 = (x2 + 83x + 83)2(x2 + 85x + 45)^ (mod 89). 

Note that in this case, it is not obvious from the polynomials how to match up roots of the 
three polynomials to form triples of Igusa invariants. A common approach has been to use the 
knowledge of the CM field to determine the possible group orders of the Jacobian of the curve, 
and then to run through all possible triples of roots of these polynomials until the correct triples 
and the corresponding curves are found. In the case that the prime p splits completely in the field 
K (case (i) in Table 3.5.1), a method for determining the possible group orders was given in |Wenj 
and |EH Proposition 4] , and the resulting CM curves constructed there were indeed ordinary. For 
other possible decompositions of the prime p in K, alternative algorithms are needed to compute 
the possible group orders. In the case of p-rank 1, a solution was given in [HMNSj . In some of 
the other examples, we show how to determine the group orders for other cases below. 

The possible group orders in the case for Example 3 are #J(C) (Fg92) = 62045284 or 63439556, 
for a genus 2 curve C over F892 with CM by K. This can be seen as follows: let p = pip2p3- In this 
case it can be verified using Magma or pari that both of the ideals pips and P2P3 are principal, 
generated by vr and vf , and vrvf = p. As in the algorithm explained in [HMNSj , we find the Weil 
p^-numbers /? = ibvrvf"^^. Then the corresponding group orders for these Weil p^-numbers are 
N = YI^{1 — /3'^), where a ranges over the complex embeddings of K. 

Represent Fg92 = F89[a], where a satisfies + 82a + 3 = 0. The four curves are 

y2 = /^(^) = c.5245^6 + ^2244^5 + ^7129^4 ^ ^1567^3 + ^2060^2 ^ ^5783^ + ^3905 
y2 = /^(X) = a2667^6 ^ ^795^5 ^ ^1956^4 ^ ^5619^3 ^ ^5331^2 ^ ^7272^ ^ 53 
y2 = /3(^) = «6464^6 + ^795^5 ^ ^4574^4 ^ ^2946^3 ^ ^1544^2 ^ ^6684^ ^ ^803 
y2 = /^(^) = „132^6 ^ ^3403^5 ^ ^2326^4 ^ ^3493^3 + ^5184^2 ^ ^1943^ ^ ^4418 

Calculating the Hasse-Witt matrix for the first curve, one computes ff^ and finds cgs = cJ^^^, 
= cm = a^^°, cne = a^^^^, and that both M and M^p'^M have rank 1, so both the 

/-number and the a- number equal 1. The same is true for the other three curves as well. 
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3.6.5. Cases (ii) and (iv) in Table 3.5.1 for non-Galois fields. We still refer to the field K = 

+ 134x^ + 89) and the class polynomials given above. 
Example 5 To give an example for cases (ii) and (iv) in Table 3.5.1 for non-Galois fields, we 
let p = 313. The prime p = 313 decomposes in K as the product of two prime ideals of degree 1 
and one prime ideal with residue degree 2. Modulo 313, the class polynomials factor as a product 
of four degree- two polynomials: 

hi{x) = (x^ + 25x + 273) (x^ + 137x + 39) (x^ + 200x + 108) (x^ + 312x + 249) (mod 313), 

h2{x) = (x^ + 20x + 121)(x2 + 90x + 119)(x2 + 138x + 297)(x2 + 173x + 78) (mod 313), 

hi{x) = (x^ + 105x + 276)(x2 + 133x + 22,Q){x^ + 232x + lS2,){x^ + 289x + 91) (mod 313). 

The two possible group orders are #J{C){Fgg2) = 9607909136 or 9588315136, for a genus 2 curve 
C over F3^32 with CM by K. This can be seen because both of the prime ideals of K of degree 1 
lying above p are principal, and letting tt and vf be the generators, we find the Weil p^-numbers 
/3 = ±TTTf~^p (this is also explained in [HMNSj ). Then the corresponding group orders for these 
Weil p^-numbers are N = ^^(1 — P'^), where a ranges over the complex embeddings of K. 
Represent F3132 = F3i3[a], where a satisfies -\- 310a -|- 10 = 0. We find eight curves defined 
over F3132. For example, the first one is the hyperelliptic curve defined over F3132 by 

y2 = /(^) = ^20046^6 ^ ^18815^5 ^ ^77496^4 ^ ^26504^3 ^ ^19266^2 ^ ^53721^ ^ ^1332_ 

Calculating /(x)^^^, one finds that the coefficients of the Hasse-Witt matrix M are: Cp_i = a^^^^^, 
Cp_2 = aiS9°o, C2p-i = 0^2990^ ^ a^^^^'^ . The determinant of both M and M(p)M is and 

the rank is 1. The same is true for all 8 curves: they all have a = 1 and / = 1. 

3.6.6. Cases (Hi) and (v) in Table 3.5.1. This next set of cases is very interesting, because we can 
see here that the decomposition of the prime in K only determines the reduction of the abelian 
surface in combination with the CM type. This is the first time we have an example of both 
superspecial and ordinary reduction modulo the same prime (of CM abelian surfaces with CM 
by the same field K, but different CM type). This phenomenon does not occur in genus 1. 

We again work with the primitive quartic CM field K = Q[x]/(x^ -|- 134x2 -|- 89) and the class 
polynomials given above. Let p = 47. As in cases (iii) and (v) in Table 3.5.1, the prime p = 47 
decomposes in as a product of two prime ideals of degree 2: p is inert in ET"*", the real quadratic 
subfield of K, and then splits in K. The class polynomials factor modulo 47 as 

hi{x) = (x^ + 18)2(x2 + Tlx 12)(x2 33x -h 19)(x2 ^ 37x 6) (mod 47), 

/i2(x) = (x^ 23)2 (x^ lOx 46) (x2 6x 17) (x^ 9x 39) (mod 47), 

h-iix) = (x2 + 2)2(x2 + 42x + 26)(x2 +x + 19)(x2 + 27x + 7) (mod 47). 

Example 6 (case (v)) Both degree-2 prime ideals lying over p = 47 are principal in this 
case, and we denote the generators by vr and vf. In this case, vrvf = 47m, where u is a unit. 
Setting /? = ±p2/tt, 

gives two possible Weil p^-mxmbevs. The two possible group orders are 
#J(C)(F472) = W^il-P") = 4901092 or 4865732, where a ranges over the complex embeddings 
of K. There are 4 ordinary CM points corresponding to these possible group orders. 

Represent F472 = F47[a], where a satisfies + 45a -|- 5 = 0. Then the four curves with these 
group orders are: 

y2 = ^829^6 ^ ^1842^5 ^ ^622^4 ^ ^1262^3 ^ ^956^2 ^ ^398^ ^ ^1255 

y2 = «929^6 ^ ^1219^5 ^ ^1483^4 ^ ^1511^3 ^ ^251^2 ^ ^224^ ^ ^1437 
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y2 = ^1852^6 ^ ^2038^5 ^ ^1790^4 ^ ^1078^3 ^ ^1166^2 ^ ^1634^ ^ ^1518 
y2 = „1783^6 ^ ^892^5 ^ ^1454^4 ^ ^665^3 ^ ^1014^2 ^ ^871^ ^ ^1754_ 

For all four curves, we checked that the Hasse-Witt matrix M and M^p^M both have rank 2, so 
these curves are indeed all ordinary. 

Example 7 (case (iii)) Each of the three class polynomials has one linear factor modulo 47. 
The curve over F47 with those F47-rational invariants is the hyperelliptic curve defined by 

y2 = 402)6 + 22x^ + 43x^ + + 29x2 + 8x + 28. 

Its Jacobian has #J(C) (F47) = p"^ + 2p + 1 = 2304 points and #C(F47) = p + 1 = 48. The 
Hasse-Witt matrix M is identically modulo 47, so the curve is superspecial. This curve occurs 
"with multiplicity two" modulo 47. 

The other two CM abelian surfaces reduce to curves defined over F472. They are the hyperel- 
liptic curves defined by 

y2 = «487^6 ^ ^977^5 ^ ^1698^4 ^ ^1530^3 ^ ^1790^2 ^ ^1618^ ^ ^1063 
y2 ^ „809^6 ^ ^1759^5 ^ ^318^4 ^ ^1254^3 ^ ^226^2 ^ ^974^ ^ ^1385_ 

They both have #J(C) (F472) = p'^ - 2p^ + 1 = 4875264 points and #C(F472) = + 1 = 2210. 
They both have the property that the Hasse-Witt matrix M is identically modulo 47, so the 
curves are both superspecial. 



3.6.7. Case (vii) in Table 3.5.1: totally inert. We again work with the non-galois quartic CM 
field K = -|- 134x2 -|- 89) and the class polynomials given above. The prime j5 = 13 is 

totally inert in K. Modulo 13, the class polynomials are: 

hi{x) = (x^ + 2x + 9)(x2 + Qx + l)(x^ + 8x^ + lOx^ + 12) (mod 13), 

h2{x) = (x^ + bx + l)(x2 + Sx + l)(x^ + 7x^ + 6x2 _^ 7^ _^ g^) (jj^qJ ^3^)^ 

/i3(x) = (x2 + 2)(x2 + ll)(x^ + 6x3 _^ 4^2 _^ 5^ ^j^Q^ J3^)^ 

We look for curves over F132 with #J(C)(Fi32) = {p^+2p'^ + l) = 28900. Represent F132 = Fi3[a], 
where a satisfies _j_ 12q -|- 2 = 0. We find 4 curves over F^32, for example the first one is: 

y2 = a'>\' + a^'x^ + a^^^x^ + a^^x^ + ^27^2 ^ ^ ^ ^148_ 

Its Hasse-Witt matrix M has rank 1 and the rank of M^^^M is 0, so a = 1 and / = as predicted 
in the tables. The same is true of the other 3 curves as well. 



4. The moduli space of pairs of elliptic curves 

Let be a positive integer. Consider the functor B^v on schemes associating to a scheme 5 
the isomorphism class of triples 

(^1,^2,7), 

where vTj : Ei ^ S,i = 1,2, are elliptic curves over S and 7 is a full level structure on i?i[A^] x 
E2[N], namely, an isomorphism, 

7 : Ei[N] X E2[N] {Z/NZf, 
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which is symplectic relative to the Weil pairing on Ei x E2 (obtained as the product of the Weil 
pairings on each elliptic curve, or, equivalently, associated to the product polarization on Ei x E2) 



An isomorphism ip: (Ei, E2,^) — s- {E[, E2,j') of two such triples over S is a pair of isomor- 
phisms of S schemes, (pi : Ei^ E[^ such that 7 = 7' o [ipi x (^2)- 

The functor B^v is naturally equivalent to the functor parameterizing isomorphism classes of 
quadruples (A, A, e, 7) over S, where (A, A) is a principally polarized abelian surface over 5, e 
is a non-trivial idempotent, fixed under the A-Rosati involution, and 7 is a symplectic level N 
structure. Indeed, given a triple E2,^) associate to it {Ei x £'2, Ai x A2, e, 7), where Aj are the 
canonical principal polarizations on Ei and e is the idempotent endomorphism (x, y) 1— t- x. The 
converse construction associates to A the triple {Ei, E2,j), where Ei = Ker(l — e),E2 = Ker(e). 
It is not hard to verify that these constructions give a natural equivalence between the functors. 

Lemma 4.0.1. For N > 3 the moduli problem is rigid. Namely, any automorphism if of a triple 
(-El, £'2, 7) is the identity. 

Proof. Such an automorphism induces an automorphism of (A, A, 7), where A = Ei x E2. It is 
well known that such an automorphism must be the identity. □ 

It follows then from standard techniques that for > 3 the functor Bjv is representable by a 
quasi-projective scheme over Z[(^Ar, A^~^]. 

Proposition 4.0.2. Let N >2. Let J he the automorphism of whose effect on points is 

(£i,£2,7) ^ {E2,Ei,-fo s), 

where s is the natural "switch", s : -E'i[A^] x E2[N] — )■ -E2[A^] x -£'i[A^]- We have a commutative 
diagram. 



where the diagonal arrow (5 is the natural morphism (Ei, E2,^) 1— )• {Ei x E2,\i x A2,7), the 
vertical arrow is an etale Galois cover with Galois group Z/2Z and the bottom arrow (5j is a 
closed immersion, induced by (3, whose image is the Humbert surface J^i^n in £^2,N, the Zariski 
closure of Hi^^ C =e/2,Af(C). 

Proof. We first show that the morphism =^7v — ^ / {J) is unramified. Suppose that J{Ei, E2,^) = 
(£2, £1,7 ° s) is isomorphic to {Ei, E2,'~f). There are then isomorphisms ipi : E2 ^ Ei, ip2 : 
El — )■ E2 such that 70s = 70 [i^i x 992) and so s = ipi x {p2 on £'i[A^] x E2\N]. But, for 
(a, 6) G -E'i[A^] X E2[N] we have s{a,b) = {b,a), while ipi x ip2{a,b) = {ipi{a),(p2{b)), which 
obviously cannot hold for every pair (a, 6) if > 2. 

The morphism — )• ,'^i\f/{J), being a quotient by a finite group, is a finite morphism. We 
conclude that it is a finite etale cover with Galois group Z/2Z. The natural morphism /3 : 
— )■ £/n clearly factors through I^m/{J) and we denote the induced morphism 



and the standard pairing on (Z/A^Z)^ given by the matrix 




■^n/{J)^ 




S^2,N 



/3j ■■ ^N,J J^2,N- 

We claim that this is a geometrically injective morphism. Suppose that 

{El X £2,Ai X A2,7) = {E'l X E'2,>!i x A'2,7')- 
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By a theorem of Weil, after possibly switching E[ with E2 , we may assume that Ei = E[, E2 = E'2 
and so, under these identifications, that 7 = 7'. Namely, up to applying J, every point in the 
image has a unique pre-image. 

The morphism /3j is also proper. This follows from the valuative crietrion of properness. As 
we shall see below the scheme is a union of products of modular curves, in particular it 
is noetherian and so we can use discrete valuation rings in the criterion. To apply it, we must 
show that if i? is a discrete valuation ring with field of fractions K, (A, X,'j)/R is an abelian 
scheme whose generic fiber is isomorphic over K to (Ei x E2, Xi x A2,7) then the elliptic curves 
Ei extend to elliptic curves over R and then so does the isomorphism. The fact that the elliptic 
curves extend follows from the theory of Neron models (since Ei x E2 = A (Sir K obviously has 
good reduction). The extension of the isomorphism follows from the fact that ^2,N has a toroidal 
compactification which is proper over Z[Cjv, N~^]. Since both ^^/{J) and £/2,N are reduced and 
the morphism f3j is proper and injective (hence quasi-finite), /3j is a finite injective morphism. 
We will conclude it is an isomorphism onto its image, the Humbert surface J^^n by showing 
that for a geometric point x of SSfqjl^J) and its image y in si2.N the completed local rings are 
isomorphic. Note that the Humbert divisor is the image of /3j, since they have the same 

generic fiber and both are the closure of their generic fiber. 

Indeed, suppose that y is the image of the fc- geometric point (2/1,2/2) of ^at. The completed 
local ring on SS^ is then just isomorphic to Vl^(A;)|ti, t2l) as SSfq is a product of smooth curves. 
Moreover, if Ei is the elliptic curve corresponding to y^, then ti is the parameter arising via 
the local deformation theory for elliptic curves (the level structure need not be a product level 
structure; regardless it extend uniquely by etaleness). On the other hand, the completed local ring 
on s^2,N of the point y corresponding to (^, A, 7) = {E\ x £"2, Ai x A2, 7) is isomorphic to the ring 
^(fc)Pii) ^1,2, ^2,15^2,21/(^1,2—^2,1) and J^4,Ar contains locally the closed formal subscheme defined 
by the ideal (ti,2) ^2.1); as is clear from the interpetation of the variables through local deformation 
theory. Since SSn /{J) is locally irreducible and the morphism is geometrically injective also J^i,n 
is locally irreducible. It follows that Mi^m is defined locally by the ideal (ti, 21^2,1) and that the 
morphism is an isomorphism on every completed local ring, which is sufficient to conclude the 
proof. 

Another way to conclude the proof is to prove that the morphism /5j is universally injective 
(or a monomorphism) and then use EGA IV, §8.11, Proposition (8.11.5). Since SSmHJ) is the 
categorical quotient of ^^n-, we know it as a functor of points and so injectivity boils down to 
the following statement: Given elliptic curves Ei, . . . , E4 over a connected scheme S such that 
El X E2 = E^ X E4 as principally polarized abelian schemes over S then, either Ei = E^ and 
E2 = E4, or El = Ei and E2 = E3. Note that to identify Ei in E^ x E4 is equivalent to giving 
an endomorphism. Choose a geometric point x S and use Weil's theorem as above together 
with Grothendieck's theorem End5(£'3 x E4) ^ Endfc(^)((£'3 x E4) (g) k{x)). □ 

We next discuss the complex uniformization of ^tv- Recall the classical construction of the 
modular curves: Given t £ Sj one lets Er = C/(l,r) be the corresponding elliptic curve, and we 
get a symplectic isomorphism Et-[N] — )■ (Z/A^Z)^ by sending 1/A^ to (1, 0) and t/N to (0, 1). We 
call this level structure 70. Let a = Mr, where M = Then the isomorphism E^ — )■ Ej- is 

given by multiplication by j{M, r) = cr + d. Since joiA + Ba)/N = ^{A, B) and 1/A^ is sent to 
{d+CT)/N , while a/N is sent {b+aT)/N, we find that {Efj,^^) is isomorphic to {Er, { ojo)- 
We remark that M = («^) ^ := {^^'^J') is an outer automorphism of SL2(Z) given by 
conjugating by (0-1) in GL2(Z). 



32 



EYAL Z. GOREN & KRISTIN E. LAUTER 



Consider the space 

^jxSjx Sp4(Z/A^Z). 

(Here the symplectic group is relative to the pairing fixed above.) To a point {ti,T2,j) of this 
space we associate the triple {Ej-^,Er2,^ ° (70 x 7o))- The group SL2(Z) x SL2(Z) acts on the 
space by 

(Ml, M2) * (ri, ra, 7) = (Min, Mgra, diag(M|, M^) o 7). 
The space of orbits is isomorphic to ^Ar(C). Furthermore, choose a complete set of representatives 
71, . . . ,7t (t = t{N)) for SL2(Z/A^Z) x SL2(Z/iVZ)\Sp4(Z/AfZ). Then, 

t t 

■'^Nic) ^ \i{T{N)\^f = n^(^) ^ ^(^)- 

i=l i=l 

Via this identification, we associate to a pair (ti, ra) in the i-th (or 7j-th, if one prefers) component 
of =^Ar(C) the triple {Er,,Er2,Ji o (70 x 70)). 

The involution J takes the 7j-component to 7j-component where 7j is determined by ji o (70 x 
7o) o s G (SL2(Z/A^Z) X SL2(Z/A^Z))7j o (70 x 70). Typically, 7^ / 7^. In fact, the components 
of ^isf are parameterized by SL2(Z/A^Z) x SL2(Z/A^Z)\Sp4(Z/A^Z), while the components of 

^j/{N) are parameterized by SL2(Z/iVZ) xSL2(Z/iVZ)\Sp4(Z/AfZ)/i/, where if = {1, ^g^^}. 

Remark 4.0.3. Here is a typical example illustrating the difference between J^i^n and Let 
i<r be a field, L a quadratic Galois extension of K and cr the non-trival automorphism of L over 
K. Let -El be an elliptic curve defined over L and not over K. Let E2 be the curve obtained 
by a to the equation of Ei (and so j{E2) = a{j{Ei))). The point (E'l, E2) of ^1 is defined over 
L, but not over K. On the other hand, its image, A = (Ei x -E2,Ai x A2) is defined over K. 
A quadratic extension is needed to define the elliptic curves Ei,E2 such that A = Ei x E2- To 
study the situation more precisely, we must include level N structure. 

From a scheme theoretic point of view we have the following cartesian diagram, 

Spec(K) x,<^2,]v ^ 




Spec(i^) ^ £/2,N ^ ^^N,J 

The morphism Spec(Jf) x^^ jv -^n — ^ Spec(K) is finite etale (being a base change of the morphism 
— ^ ■-^2,n) and so Spec(K) x^^iv = Spec(L'), where L'/K is a separable quadratic K- 
algebra. 



5. A LEMMA IN ARITHMETIC INTERSECTION THEORY 

Let i? be a Dedekind ring, finite over Zp, p<\R a prime ideal. Let vr : S — )• Spec(i?) be a smooth 
scheme of finite type over Spec(ii). Let x G S" be a closed point of characteristic p lying over p. 
Then Og^, the completed local ring at S is isomorphic to -R|xi, . . . , x„,] where n is the relative 
dimension of S over R and R = R^Sirq W{R/p), where Rq the maximal unramified subring of R. 
See [Cohlj . In particular, O^^ is a noetherian unique factorization domain. As a consequence, 
every divisor on Spf{Og^) is principal. (We remark that in fact this latter fact follows directly 
from the Auslander-Buchsbaum theorem without need for Cohen's theorem.) 
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Lemma 5.0.4. Let S — )• Spec(-R) be a smooth integral scheme of finite type over a Dedekind 
ring R containing 7L. Let B he a Dedekind ring containing R, K its field of fractions and rj he 
the generic point. Let 

i : Spec(5) ^ S, 

he a morphism of schemes over R. Let f he a rational function on S such that the divisor of 
f intersects the image of l properly (in particular, f{rj) = i* f is a well defined element of K). 
Let the divisor of f equal (/)o — (/)oo = "^ruiDi, where the mi are non-zero integers and Di 
irreducible reduced effective divisors. Let Z be the closed reduced subscheme which is the support 
ofdw{f)o. 

Let p he a prime ideal of B and x its image under l. Suppose that valp(/(ry)) = a > 0. Then 
d = max{mj : x £ Di} > 0. Let a = [a/d] . Then a > and the morphism l : Spec{B/p"') factors 
through div(/)o." 

(5.0.1) SpeciB/p") ^ Spec(S) - — ^ S 




Remark 5.0.5. We shall apply this Lemma later, in the following context: S will be the modular 
scheme =2^, at, / will be a function such that / = @^ /g, where g is a modular form of weight 10k 
with rational Fourier coefficients, the morphism l will be such that t(r/) is a CM point and our 
assumption will be that valp(/) = a > 0. 

Proof. We first argue that we may replace S by the Spf(Cg^). Indeed, on the one hand, dia- 
gram (j5.0.ip gives by passing to completions at x a diagram 

(5.0.2) Spec(S/p'^) ^ Spf(0^^) 

z^n Spf(o§^) 

On the other hand, diagram (j5.0.2|) is coming from unique continuous morphisms Og^ — )• -B/p"" 
etc., that arise uniquely from morphisms Os — ?• B/p^, etc. 

In Spf(C'5;^) every divisor is principal and so we may write there D'- = (ft) where fi G O^^, 
and D'- is the induced divisor on Spf(C'^^). D'- may be reducible, but it is reduced. U x ^ Di 
then fi is a unit in Og^. Via the morphism Spec(i?p) — )• Spec(S) — )• 5, that induces a morphism 
Spec(i?p) — )■ Spf(0^^), we may view /(ry) as an element of Kp, which is equal, up to a unit, to 
Uifiix)"'" and so: 

(5.0.3) a = valp(/(r/)) = ^ • valp(/i(r/)) 

{i:x£Di} 

= ^ • valp(/i(r/)) + ^ mj • valp(/i(r?)). 

{i:x&Di,mi>0} {i:xGDi,mi<0} 

We note that if x € Dj then valp(/j) > 1 (it may be strictly bigger, of course). In particular, 
c? > 0. Consider a' = Yl{ixeDi mi>o}'^^^pifii^))'' clearly a' • d > a and so a' > [a/d] and 
so it will be enough to prove that diagram ()5.0.2p holds with a' . Consider the function fz = 
T\{rxeDi mi>o} fi which defines ZriSpi{Og^). To show diagram ()5.0.2p holds is equivalent to show 
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that fz, when pulled back to Speci?p has valuation at least a' . But the valuation is precisely 
E{i:x6A,m,>o} valp(/i(??)) and we are done. □ 

5.0.8. Examples. The whole theory is developed precisely to deal with situations where one can- 
not just "write down everything explicitly", and so our examples are a bit artificial. 

• Consider the scheme S = Spec(Z[a;]) and the function f{x) = — 1. The divisor of / is 

D1+D2, Di = dw{x-l),D2 = diY{x + l). 

Let r = 3 corresponding the the point determined by the homomorphism — t- Z, x 1— t- 3. 
We have val2(/(r)) = val2(8) = 3. We examine the situation on the completed local 
ring of the point {2,x — 3) = {2,x — 1) = {2,x + 1) (the reduction of r modulo 2). 
Also at this completed local ring the divisor of / is given by Di = div(x — 1),D2 = 
div(x-|- 1) (with a slight abuse of notation). It follows from our lemma that the morphism 
Spec(Z) — >■ Spec(Z[x]) corresponding to r induces a morphism 

Spec(Z/23z) Di\JD2, 

where by Di U D2 we mean the closed reduced subscheme whose support is Di U D2, 
namely Spec(Z[rc]/(2;^ — 1). Indeed, this is nothing but saying that there is indeed a well 
defined homomorphism Z[x]/(x^ — 1) — )• Z/2^Z taking x to 3. 

An interesting feature of this example is that the morphism Spec(Z) — t- Spec(Z[x]) 
only induces a well defined morphism Spec(Z/2*Z) — )■ (where is the reduced closed 
scheme supported on Di, namely Spec(Z[x]/(x — 1)) for z = 1 and Spec(Z[x]/(x + 1)) for 
i = 2). Moreover, the divisors Di and D2 intersect transversely, the intersection being 
{x — l,x + 1). The subtlety is in the scheme structure on Di U D2 and in particular in 
the fact that Z[x]/{x^ " 1) 5 Z[x]/{x - 1) © Z[x]/{x + 1). 

• Once more S = Spec(Z[x]) but now f{x) = x"^ + 1, which is irreducible. The point r = 2 
corresponds to the homomorphism Z[x] — )• Z, x 1— )• 2. We have val5(/(r)) = val5(5) = 1. 
We have an induced morphism Spec(Z/5Z) — >• Spec(Z[x]/(2;^ + 1)), which amount to the 
fact that there is a homomorphism Z[a;]/(x^ + 1) — ?• Z/5Z taking x to 2. 

In the completed local ring of the point (5, x — 2) the function / decomposes as f{x) = 
{x — i){x + i) where i is an element of Z5 whose square is —1 and whose reduction is 2 
modulo 5. Thus, the function x — i vanishes to first order at this point, while the function 
a; + i is a unit. The divisor of / is locally Di = div(2; + i) and the lemma states that we 
have an induced morphism Spec(Z/5Z) — Spf(Z5[(2; — 2)]/(x — z)), which amounts to the 
fact that there is a well defined continuous homomorphism ZsKx — 2)]/(x — z) — )■ Z/5Z 
taking x to 2. 

• Consider Spec(Z[l/6][x, ^/]/(2/^ — (x^ — 1))) and the function /(x) = x — 1 whose divisor 
is 2[(1,0)], and we note that the divisor [(1,0)] is not principal . We have x^ — 1 = 
(x — l)(x^ + X + 1) and we let S' be the open subscheme whose complement is given by 
x^ + X + 1. The divisor of / on S' is stiU 2[(1,0)] but now [(1,0)] is locally principal; it 
is the divisor D = [(1,0)] of (x — l)/y. The divisor of / is 2D. Finally, let S be the base 
change of S' to Z[l/6, V21E]. 

We consider the point r = (6, \/215) of 5, corresponding to the homomorphism 

Z[l/6, V2T5, X, y, l/(x2 + X + l)]/(y2 - + 1) ^ Z[l/6, ^215], 

given by 

(x,2/)^(6,\/2T5). 
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Let p be the prime ideal above 5 in Z[l/6, V215]. We have /(r) = 5 and valp(/(T)) = 
2. We deduce from our lemma that we have an induced morphism Spec(Z/5Z) — )■ D, 
corresponding to the fact that there is a well defined homomorphism 

Z[l/6, V2T5, X, y, +X + !)]/(/ -x^ + l,{x- l)/y) ^ Z[l/6, V21b]/{p) ^ Z/5Z, 

where 1— >• (6, \/215). 



6. A PROBLEM IN DEFORMATION THEORY 

6.1. Deforming endomorphisms. Let A be an abelian variety of dimension g over a perfect 
field k of characteristic p and let r be the rank over Z of Endfc(yl) (it is finite and at most Ag'^). 
Let {R,m.R) be a local artinian ring with residue field k = R/vxr of characteristic p. Let ur 
be the minimal positive integer such that m^^ = 0. Let be the least positive integer such 
that p*^ G 

Let A/R be a deformation of A. By that we mean that A — t- Spec(i?) is an abelian scheme and 
that there are given closed immersions: 

A ^ ^ ^ 



Spec(i?) 3 Spec(A;) 

By a fundamental result of Grothendieck, we have an inclusion of rings 

EndH,(A) ^ Endfc(A). 
Let us define the magnitudes (a-priory possibly infinite) 

i{A/R) = [Endfc(^) : End^lA)], 

and 

(6.1.1) i{R) = m{{i{A/R) : A/R a deformation of A}, 

(6.1.2) 3{R) = sup{i{A/R) : A/R a deformation of A}. 

These depend on A but we suppress that from the notation. We are interested in studying 
i{A/R),i{R) and 3{R). Although we provide below some general results, our focus later is on 
the case of elliptic curves. The general case certainly deserves further study, but it will not be 
carried out here. 

Proposition 6.1.1. The quantity i{A/R) is finite and is a power of p. So are i{R) and 3{R). 
The following inequalities hold. 

Corollary 6.1.2. Let K be a CM field and O an order of K. Let A — >• Spec(i?) be an abelian 
scheme over a dvr {R,mR) whose residue field is a perfect field k of characteristic p, and suppose 
that we are given an optimal embedding O ^ EndR(A). Let O' ^ O be the optimally embedded 
order of K in Endfc(j4 ® k). Then [O' : O] is a power of p. 
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Example 6.1.3. Suppose that E is an elliptic curve over a number field M with complex mul- 
tiplication by an optimally embedded order O of a quadratic imaginary field K. Let p be a 
prime ideal of M of residue characteristic p, and assume that E has good reduction modulo p, 
denoted E', and that the conductor of O is prime to p. Then O is optimally embedded in End(i?'). 

On the other hand, the conductor always becomes smaller when it is divisible by p. Suppose 
that E has supersingular reduction, Ok = '^[S] and O = 7j\pr5], where r G Z. One verifies 
that pr6 has degree divisible by p^. Since E' is supersingular any isogeny of degree p^ vanishes 
on E'\p\ and it follows that r6 is also an isogeny of E'. It is an interesting situation. Because O 
is optimally embedded in End(-E), the kernel of the multiplication- by-p map on the finite fiat 
group scheme Ker[pr(5] has order p generically, but order p'^ modulo p. The same happens in the 
ordinary case; see § 16.4. 11 This example is well-known but is usually proven by other techniques. 
See, for example |Lang2 Theorem 5, § 13.2]. 



Proposition 6.1.4. Let A be an abelian variety over an algebraically closed field k of character- 
istic p. 

(1) Let O C End(j4) be a set. Let be the universal formal deformation space of A. There is 
closed subscheme Zq which is universal for the property of extending O to a deformation. 

(2) Let n be an integer. There is a closed subscheme that is universal for deformations A of A 
such that [End(A) : End(A)]|p". (The same holds true if we wish to work with elementary 
divisors for the quotient abelian group End(A)/End(A).j 

Proposition 16.1.1] is folklore. The first assertion is proven in |Dokl Lemma 4.3.5]. The proof 
consists of verifying Schlessinger's criteria for pro-representability. The second assertion follows 
immediately from the first given that there are only finitely many subrings of a given index (let 
alone of given elementary divisors) and they are all finitely generated as Z-modules. 

The proof of Proposition 16.1.11 is given below, after we review Grothendieck's crystalline de- 
formation theory. 



6.2. Crystalline deformation theory. Our main reference here is Grothendieck's monograph 
[Groj . First recall the notion of divided power structure (d.p.) on a pair [R, L) consisting of a ring 
R and an ideal L<\R (loc. cit. Chapitre IV, §1.1). These are functions 7.„ : I ^ I,n = 1, 2, 3, . . . 
that "behave like" x^/n\, n = 1,2,3, ... , that is, the following properties hold true: 

(1) 71 (x) = x; 

(2) Jn{x + y) = Jn{x) + Yh=1 ln-i{x)li{y) + Iniv)] 

(3) 7„(2;y) = x"7n(y) for x e R,y e I; 

(4) Jmilnix)) = j^^Jmnix); 

(5) Jm{xhnix) = ^^:^^-fm+n{x). 

The axioms imply the identities 

= n!7„(x), X £ I, n = 1,2,3 ... . 

Hence, if R is an integral domain, whose quotient field is of characteristic 0, there is at most one 
d.p. structure on /. It is given by 'jnix) = x'^/nl. This d.p. structure is well defined if x^/n! E / 
for all X S /, n = 1, 2, 3, . . . . A divided powers structure is called nilpotent if there is an N, such 
that for any positive integers ai, . . . , a,, with X][=i ai > N and elements xi, . . . , x^ of /, we have 

Iai{xi)'ya2{x2) ■ ■ ■ 7ar{Xr) = 0. 
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Example 6.2.1. Let p be a prime. Suppose that 1^ = and that 1,2,3, ... p — 1 are invertible 
in R, then we may define 7n(a;) = x'^/n\,n = 1,2,... ,p — 1 and "in{x) = 0,n > p. This is a 
nilpotent d.p. structure with N = p. 

Example 6.2.2. Let {R,I) be a discrete valuation ring of mixed characteristic {0,p) and uni- 
formizer vr. We assume that val(p) = 1 and val(7r) = 1/e. We have 7r"/n! G / if and only if 
n/e > {n — Sn) /{p—l), where Sn is the sum of the digits in the p-adic development of n. See loc. 
cit. IV §1.3.) That is, 7r"/n! e / for ah n > 1 iff e < p - 1. 

If R has a d.p. structure, i.e. e < p — 1, then we have an induced d.p. structure on 
{R/I^ , I /I^), which is nilpotent of level if e < p — 1. We say then that the d.p. struc- 
ture on {R,I) is topologically nilpotent. The condition e < p — 1 is necessary for that. 

The theorem that we need is in loc. cit. V §4. Following the notation there, we use D*{A)s to 
denote the relative de Rham cohomology Il^-^{A/ S). It will take us too long to define the notions 
of the crystalline site and crystals in general. For that see loc. cit.. We just note a particular ex- 
ample of the theorem: Let S* ^ 5' be a closed immersion of affine schemes, Spec(i?) — )• Spec(i?'), 
where i?' — t- i? is a surjective ring homomorphism with kernel /, such that / is equipped with 
nilpotent d.p.. This is an example of a nilpotent thickening of S by S'. For instance, in Sch- 
lessinger's theory one considers the case where the rings R,R', are local rings with maximal 
ideals m, m', respectively, i?' — t- i? is a local homomorphism whose kernel is principle, say equal 
to (t) and m't = 0. Note that this implies that = 0. One then has a canonical nilpotent d.p. 
structure on (t) given by 71 (x) = x and 7„(a;) = 0, n = 2, 3, . . . . 

Theorem 6.2.3. Let S be a scheme and S' nilpotent thickening of S with d.p. which is lo- 
cally nilpotent. Consider the natural functor from ahelian schemes over S' to the category of 
couples (A, Fil^) of an ahelian scheme A over S and a suhmodule, locally a direct summand, 
Fil^ ofW{A)s', which is a prolongation of ¥\]^I])* {A) s = w^. This functor is an equivalence of 
categories. 

Example 6.2.4. Let be a quadratic imaginary field and OK,m be the order of conductor m 
in K and say p'^||m, m = p^n. Let E' be a superspecial elliptic curve over ¥p with an action of 
OK,n- One may wish to calculate the deformations of E to which the action of the subring OK,m 
of OK,n extends. (Note that this is the general situation by Example 16.1.31 ) Unfortunately, 
such a calculation is not accessible via crystalline deformation theory. For example, consider 
such deformations to characteristic zero that are defined over a d.v.r. R with d.p.. Every such 
deformation E defines then a submodule of H^^.yg{E / R) = H^^y^^E /W {¥p)) (i^ R, which is a direct 
summand of rank 1 extending the Hodge-de Rham filtration on H^-^i^/^p)- We assume such 
a deformation exists, which means that there are two embeddings ii,t2 : OK,n — ^ R, the first 
induced from the action of OK,n on the tangent space and the second is its Galois twist. We 
have Hlj.yg{E / R) = OK,n R ^ R ® R hy {ii ® 1, i2 ® 1) . If p / 2 is unramified this is an 
isomorphism of rings and under this isomorphism the order of conductor m is sent to the subring 
Oa '■= {ix,y) G R(B R : X = y (mod p"")}, generated as an i2-module by (1, 1), (p", —p"'). A direct 
summand i?-module of rank 1 of R^ is given by {x, y) with either x or y a unit. To be preserved 
under Oa we must have rr = or y = 0. Thus, we see that there is a unique deformation for 
which the action of Oa extends, and then also Oq acts. The conclusion is that elliptic curves over 
a finite extension of Qp on which OK,m acts optimally are not defined over a base affording d.p.. 
That is, the ramification index is at least p. Of course the theory of complex multiplication and 
class field theory give more precise results. It remains an interesting problem to actually calculate 
the closed subscheme of the deformation space of E to which the action of OK,m extends. 
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6.3. Proof of Proposition 16.1.11 We remark that there are many cases where i{R) = 1. An 
obvious example is when R = k[e] and we take the constant deformation A = ^4 (8)^ k[e]. A more 
interesting example can be given in the case of ordinary abelian varieties, see ^6.4[ 

Let {R,mii) be a local artinian ring with residue field k = R/xnR. Let n/j be the minimal 
positive integer such that m^^ = 0, as before. We define successively rings 

R, = R/mR, Ri = R/ml+'^-'\ R^ = R/m'^''^-'\- ■ ■ , Re = R/m'^''^-'\ 
where i = \{nR — l)/{p — 1)]. There are canonical surjections 

Re Re^i ... Ri ^ Rq, 

and we let Ij = xn'j^^'''^^^^^^'' /rnpl'-'^^''^\ j = 1, 2, be the kernel of the surjection Rj — ^ Rj-i- 

We note that /J = in Rj and hence the morphism 

Spec(iij_i) Spec(i?j), 

is a nil-immersion with canonical divided powers structure as in Example 16.2. 1[ Let t/j be the 
minimal power of p such that p*^ € Then = in Rj. 

Now, by arguing inductively on j, we reduce to the following situation. Let A — )• Spec(-Rj_i) 
be an abelian scheme of relative dimension g and let A — )• Spec(i?j) a deformation of it. We need 
to show that [End(A) : End(^)] is finite and is equal to a power of p. By crystalline deformation 
theory, the closed immersion of abelian schemes A ^ A corresponds functorially to a diagram 

u 

where ujj^i,ujj are free i?-modules that are rank g direct summands of Rj^i and Rj^ , respec- 
tively. In particular, an endomorphism / G End(yl) acts canonically and compatibly on Rj^i 
and R^^ and preserves Wj-i. It extends to an endomorphism of A if and only if it preserves Uj. 
Consider then p^^f. Let x G ujj and choose a y £ ujj such that f{x) = y (mod Ij), i.e. equality 
holds between the images of f{x) and y in Wj-i. Then f{x) — y is in the kernel of the ho- 
momorphism ujj — t- Wj-i, which is certainly contained in IjRj^ ■ Since p^^Ij = 0, we conclude 
that p^^f{x) — p^^y = and so p^^f{x) G Uj. 

We note that the same reasoning gives that if s- / extends to an endomorphism of A and {p, s) = 
1 then / also extends, because s is invertible in R. This can also be concluded from the Serre- 
Tate theory that gives End(A) = {/ G End(A[p°°]) : f\A[p°°] = g\A[p°°] ^or some g G End(j4)}, 
namely, the endomorphisms of A are the endomorphisms of its p-divisible group whose restriction 
to the p-divisible group of A is induced from a bona fide endomorphism of A. 

We have r — 1 appearing in the power of p in the statement of the proposition, namely there 
is "a saving of 1", because Z C End(A) and is a direct summand in it (as an abelian group). 

6.4. Ordinary abelian varieties. Strictly speaking, the following is not needed for the main 
results of our paper, as we shall need to consider supersingular abelian varieties. It is included 
here for the sake of completeness. Our main reference is Katz's paper |Kat j . 

Let k be an algebraically closed field of characteristic p and let A be an ordinary abelian 
variety over k. We let Tp{A) = lim A[p'^]{¥p) and Vp{A) = Tp{A) ®z Q. Then the deformations 

^ 2 

of A are pro-represented by a formal torus over the Witt vectors of k, Gm — ^ Spf(14^(A;)). One 



U 

UJj . 
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fixes isomorhisms Tp{A) = Zp and Tp{A^) = Zp. The deformations A — )• Spec(i?) of A to a local 
artinian ring R with residue field k are in functorial bijection with 

Hom(Tp(A) Tp{A'),GZ{R)) = Hom(Z^ ^, 1 + m/j), 

and so can viewed as bilinear forms on Zp x Zp with values in the multiplicative group 1 + m/j. 
We denote the bilinear form corresponding to a deformation A — t- Spec(i?) of A by ( , )a. In 
particular, an endomorphism f: A ^ A extends to A if and only if 

{fx,y)A = {x,fy)A, 

where we use / to denote also the endomorphism of Zp induced from / via the chosen identifica- 
tion Z^ ^ Tp{A), and similarly for /* : ^* A*. 

The canonical lift of A to i? is the deformation A such that ( , )a is the trivial pairing 
(identically 1) and we see the well-known fact that for this deformation End(^) = End(A) and 
so = 1. We also see that if p'^ is the exponent of the multiplicative group 1 -|- xriR then 
if / G End(A) then p'^f extends to any deformation of A to R. 

Let us assume that ^ is a simple ordinary abelian variety with complex multiplication. This 
is the case for example if A is simple and defined over Fp. In this case, End'^(^) is a CM 
field K; let O C A' be the order optimally embedded in End(^). Since the action of O lifts 
to the canonical lift of A and so to characteristic zero, it follows from the theory of complex 
abelian varieties that /* is just given by / (complex conjugation applied to /) if one chooses any 
polarization to identify Vp{A) with Vp{A^). We find that / extends to a deformation ( , )a if and 
only if 

{fx,y)A = {x,fy)A- 

For a fixed / this is a linear equation in the matrix coefficients of ( , )a- In general, this can be 
used to explicitly determined the closed subscheme Zo and one sees that they come out formal 
sub-tori. To illustrate we consider the one-dimensional case. 

6.4.1. Ordinary elliptic curves. In this case ( , )a is just an element (1, 1)a = Q'a G 1 + ni/j. 
We claim that since p is split in K, the identification of / with an element of Zp (viewed as a 
homomorphism of Zp = Tp{A)) is just viewing / as an element of Zp via the embedding K — )• Qp 
determined by one of the prime ideals of K above p (it would not matter which). An endomor- 
phism / extends to this deformation if and only if ^a"^ ~ ^- order of qa is then this 
says that / — / is divisible by p". Thus, End(A) is the intersection of End(A) with the order of 
conductor p'^ in K. 

In particular, we see that if End( A) = Ok and the exponent of 1 -|- mR is p^ then for every < 
a < b there is a deformation A with End(74) the order Ok,p^ of conductor p". Conversely, the 
set of g G 1 -|- mR to which Ok,p°- extend is defined by the equation g^" = 1. These are the 
closed sets appearing in Proposition 16. 1 .41 This is of interest: if i? is a dvr of mixed characteristic 
and we are trying to find a deformation A of ^ to i? such that End(A) = Ok,p, say, then we 
must introduce ramification. We need a p-th root of unity. In fact, a closer look reveals that 
for an elliptic curve E/¥p with CM by Ok, there are precisely p" — p"~^ deformations E to 
characteristic zero such that Ok,p°- is optimally embedded in End(E). They are provided by the 
primitive p"-roots of unity. The fact that there is a unique deformation for which we get an 
action of Ok implies that no two singular moduli for Ok are congruent modulo p. The relation 
between the class numbers h,hpa, of Ok and Ok,p'^ respectively, is (assume for simplify that 
K / Q(i),Q(a;)): hpa = h x (p" -p""^) (cf. |Lang2i Theorem 7, §8.1]) and so we conclude that 



for every elliptic curve E over a p-adic ring with action of Ok,p<^ the reduction has action by Ok, 
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as in the supersingular case. This is classical (see |Lang2 Theorem 5, § 13.2]). Note also that we 



get very precise information about the p-adic completion of the field generated by the singular 
moduli for Ok,p<^ and so about the ramification at p of this field. 

6.5. Supersingular elliptic curves. Let k = ¥p. Let y be a complete dvr containing the 
completion of the maximal unramified extension W{k) of Zp and of ramification index ey < p—1. 
Then V ^ k has topologically nilpotent divided powers coming from 7n(x) = x"/n! in V . In fact, 
using results of Zink (see remarks on page 6 of [Zink] ) , it is enough to assume that ey <p—l and 
so that V has divided powers structure (not necessarily nilpotent). The advantage is that p = 2 
is allowed too, as long as it is unramified. 

Let E/k be a supersingular elliptic curve. Recall that End(i?) is a maximal order in the 
rational quaternion algebra i?p,oo ramified only at p and oo. We apply Grothendieck's crystalline 
deformation theory to study for a deformation K/R oi E the index [End(-E) : End(E)]. 

Lemma 6.5.1. The following holds: 

(1) [End(^) : End(IE)] = [End(^) (g) Zp : End(E) (g) Zp] . 

(2) End(£^)(X)Zp = {{pt'^ a'^) : a,b G VF(Fp2)} =: D, where a is the Frobenius automorphism. 

(3) There is a basis {61,62} of Hl^y^{E /W {k)) with respect to which the action o/End(i?) is 
given as matrices as in (2). 

Proof. The first claim holds, because by Proposition 16.1.1] the index is a power of p. To prove the 
rest, we note that E can be defined over Fp2 and so Hl^y^{E /W {k)) has a basis 61, 62 defined over 
Fp2 such that the cj-linear Frobenius map is given by the matrix ( p ) with respect to this basis. 
Now, we have End(i?) ®'Lp = End(i?[p°°]) (this uses Tate's theorem at p plus the fact that the 
Galois action, being in the commutant of the quaternion algebra End'^(i?) is central), which is in 
turn isomorphic to the endomorphisms of Hl^^^^{E /W {k)) commuting with (p o)- The condition 
then comes out 

'a b\ fO l\ /O 1\ fa'' b''" 



dj \p Oj \p J yc" d'' 

I.e., 

'pb a\ f c" d^ 



ypd c J Xpa" pb'' 

from which now both (2) and (3) follow. □ 

Proposition 6.5.2. In the basis {61,62} the Hodge filtration on H^j^{E/k) is given by the image 
of the span of ei in H^j.^^{E/W{k)). 

Let n be a positive integer. A deformation K of E to R := V/xriy, equipped with its canonical 
divided powers structure is given by the span of a vector in R? = H^^{E/R)of the form (l,y) 
with y G mn and so we denote it Ky. In particular, an element (^^.r ) in End(£') (S) Zp extends 
to the deformation Ey if and only if 

(p^aO(y)eSpan^((i)). 

(The proof is straightforward.) 

Theorem 6.5.3. Let V be as in Proposition \6.5.R Then 

^2{\n/ey]-l) < ) < 3{V/m'^) < p^C""!). 

Furthermore, these bounds are optimal. 
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Proof. Let R = V/m"^ and Dy = {{^^^ : a,b e W{¥p2),by^ + (a - a'')y -ph" = Q (mod m^)}. 
Note that 

eSpanR((i))4^6y2^(a-a'^)y-p6'^^0 (mod m^», 

and so Dy is a ring, identified with End(Ey) (E) Zp. We note that the map 

^■.D^R, (pg.^^.) ^6y2^(a-a>-p6^ 

is a Zp-linear map whose kernel is Dy. We shall give a lower bound on [D : Dy] by bounding 
'^D/Dy = tt'/'(D) from below. 

Suppose that p ^ 2. Let {l,a} be a Zp basis to VF(Fp2) such that a°" = — q and a is a 
unit. We normalize the p-adic valuation so that val(p) = 1. If A, B & then val(74 + Ba) = 
val{A - Ba) = min{val(74), val(i?)}. We note that 

ip{D) = Span^ - p, a{y^ + p), ay]. 

Consider the linear combination 

C{A,B) = A{y^-p) + Ba{y^+p), A,BeZp. 

We note that 

val(C7(^, B)) < 7 := — =^ C{A, B) ^ {in R = V/m"^). 

Let y denote also some lift of y G i? to We distinguish cases: 

(1) val(y) > 1/2. We write 

C{A, B) = y'^{A + Ba) - p{A - Ba). 

Since val(A + Ba) = val(yl — Ba) and val(y^) > 1, we find that 

val(C(yl,5)) = 1 + min{val(yl),val(S). 

It follows that as long as either va^A) and val(i?) are both less than 7 — 1, or, equivalently, 
less or equal to [7] — 2, we have C{A,B) 7^ 0. Equivalently, the group homomorphism 

Z/pM-i X Z/^rTVi {A,B) ^ C{A,B), 

is injective. We conclude that ^(fiiD) > p2(r7l-i), 

(2) val(y) < 1/2. In this case val{y'^) < 1 and so we find that val(C(^, i?)) = val(y2) + 
min{val(^), val(-B)} < 1 + min{val(^), val(-B)} and we get the same estimate (we do not 
bother with improving it). 

(3) yal{y) = 1/2. In this case we note that either val{y'^ — p) = 1 or val(y^ + p) = I. So, 
either val{y'^ — p) = 1 or val{a{y'^ = 1- We assume that val{y'^ —p) = l, as the other 
case is entirely similar. In this case we consider the linear combination 

D{A,B) = A{Y'^-p) + Bay, A,BeZp. 

Since val{A{y'^ — p)) = val(74) + 1 and val(i?ay) = val(i?) + 1/2 and, in particular, are 
never equal, we find that 

valiD{A,B)) = min{l +val(A),l/2 + val(S)}, 

and, as long as val(74) < 7 — 1 or val(i?) < 7 — 1/2, D{A,B) / G i?. Weakening the 
conclusion to val(A) < 7 — 1 and val(i?) < 7 — 1, we find the previous estimate. 
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Next consider the case p = 2. Represent W{¥p2) as VF(Fp)[t]/(t^ + 1 — 1). A key point turn out 
to be that a = t — \s a, unit and for A^B^'Lp we have 

val(A + Bt) = val(yl + Bf) = min{val(^), val(S)}. 

One checks that 

ip{D) = Span^^{?/2 -P,ty^ -pf^ay). 

We let now 

C{A,B)=A{y^-p) + B{ty^-pn, D{A, B) = A{y^ - p) + Bay, A,B€Zp. 

As before the analysis is divided into three cases: (i) val(y) > 1/2, (ii) val(y) > 1/2 and val(y) = 
1/2, which are treated in an entirely similar manner. In cases (i) and (ii) it is helpful to write 
C{A, B) = y'^{A + Bt) — p{A + and in case (iii) first one argues that we can not have both 
val(y^ — p) > 1 and val(ty^ — pt"); assuming without loss of generality that val(y^ — p) = 1, one 
uses D{A,B) for the estimate, as before. 

The upper bound on 3{V/my) follows using the same technique as in the proof of Proposi- 
tion [GTLT] which itself gives a slightly weaker exponent (3 • [^^1 • [^5x1)- 

We now show that the bounds in Theorem 16.5.31 are optimal. 

In [Grsj Gross studies the deformations of a supersingular elliptic curve for which an action 
of a ring of integer of some fixed quadratic imaginary field extends K. He obtains that the 
endomorphism ring of such a deformation over VF(Fp) is precisely Ok + p"~^End(ii') and, in 
particular, of index in End(£'). This conforms nicely with our theorem that states this is 

the best possible. 

A concrete case of a deformation where this bound is achieved is the case when y = p > 2 
and n = 2. Note that in that case the target of the map tp is VF(Fp2 ) / (p^) , which has cardinality p^. 
It is also easily verified that ip{D) is generated in this case over 'Lp/{jp') by p and ap and so has 
cardinality p^ . We conclude that Dy has index p^. In fact, Dy are the matrices in D defined 
by the condition a — = (mod p). Thus Dy contains pD and modulo pD it is given by the 
basis (a, b) = (1, 0) and (a, b) = (a, — 2a°'). If we take any quadratic imaginary field K = QiV—d) 
{d square-free integer) in which p is inert and let a = \J —d then we find one of the deformations 
considered by Gross for K. 

Now consider again the case of a general (y, my) but which is unramified over Qp, where p > 2. 
Suppose that there are A,B,C S TLp such that 

(6.5.1) A{y^ - p) + Ba{y^ + p) + Cay = {Ba + A) ■ y"^ + Ca ■ y + p{Ba - A) = Q (mod m^) 

Choose y to have valuation 1, equal to the valuation of p. If Yal{Ba + A) < n — 1, Equation ()6.5.ip 
implies that val(C) = val(i?Q — ^4) = val(i?a + A). We get an equation 

2 Ca Ba — A Ca 

Ba + A Ba + A Ba + A 

which is an equation with integral coefficients that holds in V/my- By Hensel's lemma it follows 
that the polynomial Y"^ + Y + 

Psa+A ™ variable Y has a solution, say yo, in W{¥p2) 
lifting 0. Moreover, if y'^ is the other solution (so that f{Y) = Y'^ + -^^Y + p^^ = [Y - 
yo)(Y — y'o)) then val(yo — y'o) = 0, as ?/q reduces to a unit modulo the maximal ideal. Now, let 
us choose y so that in addition y W(Fp2) and for every Galois conjugate y' of y the difference 
y — y' is a unit. For example, y could be p^ where C is an i-t root of unity where ^ 7^ p is a large 
enough prime. Note that f{y) = {y — yo)iy — y'o) = (mod my). Since val(y) = 1, ?/ — i/q is a 
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unit and so val(y — yo) > 0. It follows that yo is closed to y than any of y's conjugates and so, 
by Krasner's lemma, y G Qp(yo) = W{¥p2) (gj^p Qp and that is a contracdiction. 

Thus, val(-Ba + A) > n — 1. We get then that mm{val{A),va\{B)} = n — 1 and then Equa- 
tion (j6.5.ip give that val(C) > ?i — 1 as well. This shows that for such a choice of y we get that 
H (p{D) (mod p") is 3(n — 1) and so the upper bound in the theorem can be achieved. This shows 
that the bounds are optimal. □ 

6.6. Bound in the case of high ramification. As above, let y be a discrete valuation ring, 
which is a finite extension of W(Fp) with absolute ramification index ey- As before, let S be a 
supersingular elliptic curve over ¥p. The purpose of this section is to provide a lower bound on 
[{V/xxiy) (defined relative to deformations E of -E to V/my) which is valid regardless of whether 
the ramification index ey is smaller than p or not. The proof uses different techniques than the 
ones used above. 

Consider a deformation E over R where R = V/xriy. The Hodge filtration 

o^H'iE,nl/j,)^m\^{E/R), 

is stable under End(E) and so there is a resulting ring homomorphism 

if : End(E) ^ T{R), 
where T{R) are the upper triangular matrices with entries in R, 

T(i?) = |(Q d) -"'^'^^^ 

Let C = End(E) ^z^p- As we have proved above, [End(^) : End(E)] = [O : O'], where O is the 
maximal order of Bp^^o ®Q) Qp obtained as the p-completion of End(£'). 
There is an induced ring homomorphism 

(p:0'^ T{R). 

Let K = Ker((^), let I{R) = | (^q • "'^'^ ^ -^j' ™d let P = ip-^{I{R)). Note that I{R) is 
the kernel of the ring homomorphism 

T{R)^R(BR, : a,6,(i e i?| ^ (a,(i). 

It follows that I{R) is a two-sided ideal, such that T{R)/I{R) is a commutative ring. Moreover, 
I{R)'^ = 0. As consequence P is a two sided ideal of O' such that C K, where K = ker((/7) 
and O' / P is commutative. 

The following lemmas will be proven in the next subsection. 

Lemma 6.6.1. Let 

Then On is an order of O . In the situation above, suppose that O' = On, then, in the ring R, 

= 0. 

Lemma 6.6.2. For an order O' C O, let 

Ind(O') = logp([0 : O']), App(O') = min{iV : O' D On}- 
(bid is for index and App is for approximation.) Then, 

App(O') < Ind(O')- 
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Assume the Lemmas. Given an order O' , we have O' 5 On where = App(C) and so the 
homomorphism ip induces a homomorphism (p : On ^ which imphes by Lemma 16.6.11 

that = 0. Since the minimal power of p which is zero in R is [n/e\/] we conclude that 

(4-App(C'')+2) > \n/ev^. Combining it with Lemma[6S21 we find that ^(0') > \{\n/ev^-2). 
To summarize, we have proven the following theorem. 

Theorem 6.6.3. With the above notation, 

6.6.1. Proof of the Lemmas. We use the presentation for the maximal order O given above, 



Consider the situation where O' = On = "^p+p O. We have a homomorphism ip : On — ^ T(R) 
with kernel K and the ideal P = ip~^{I{R)). As we have noted P^ C K. Let [x,y] := xy — yx. 
Since On/P is commutative, we must have {x,y\ € P for all x,y £ On, and so G K for 



all x,y G On- Consider the elements x = p j ,y = P (^p^o- j: where for p 7^ 2 we 

choose t to be a unit in W{¥p2) such that t^ = —t and for t = 2 we choose t G W{¥p2) such that 
t^ + t-l = 0. In both cases t — t" is a. unit whose square is a unit in Zp, hence in On- Now, 

We conclude that (^^^ ~ _ ^^^^^ G K and so that = in iJ. Lemma EMI 

follows. 



Lemma [6.6.21 is in fact trivial. The abelian group O/O' has order plnd{0') thus, if a G O then 
pind(o') . a = in O/O', namely, pi'^d(o') . ^ c C. 

6.6.2. Scholium. One may ask if the bound in Lemma 16.6.21 can be improved. The answer to 
that is no. The reader is referred to the paper by Brzezinski |Brz] . In particular, in Proposition 
(5.6) of that paper we find the classification of all Gorenstein orders in O. Examination of the 
classification shows that our Lemma cannot be improved; More precisely, in cases (a), (b) and 
(ci) one actually finds that App(C'') < [Ind(C)/2] (and the passage to non-Gorenstein order is 
not a problem using Proposition (1.4) of that paper), but this does not persist in case (C2). 



7. The main theorem 

Let -fC be a primitive CM field of degree four over Q. Let K"^ = Q(\/(i) where d is a positive 
square-free integer. Write 

r = a + 

(That is, r is negative under both embeddings of into M.) 

Let r G Sp(4,Z)\io2 be a point such that the associated principally polarized abelian variety 
At has CM by Ok. Let L = NHk--, where N is the normal closure of K over Q and let be 
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a prime of L above the rational prime p. We fix the notation as in § [3l In particular the CM 
type is <I> as given there and we have prime ideals pAr^i = p^, n A^, ^k,i = Pl H K, ^k*,i = Pl H K* 
and p, corresponding to the fields in the diagram: 

L = HHk- 
N Hk* 



K K* 



Let e = e(pAr^i/p) be the ramification index of p7v,i over p. 

Theorem 7.0.4. Let t be a CM point, as above. Let f = g/Q^ be a modular function of level 
one on Sj2 where: 

(1) Q is Igusa's 4 • xio, the product of the squares of the ten Riemann theta functions with 
even integral chracteristics, normalized to have Fourier coefficients that are relatively 
prime integers. 

(2) g is a level one modular form of weight 10k with relatively prime integral Fourier coeffi- 
cients. 

Then /(r) G L = NHk* and 



-4fce Aogp (^^) + l) e<p-l 
-Ake(8logJ^^^]+2] else. 



(7.0.1) valp,(/(r))> 

Furthermore, unless we are in the situation of superspecial reduction, namely, unless we have a 
check mark in the last column of the tables in § Q valp^(/(r)) > 0. The valuation is normalized 
so that a uniformizer at pi has valuation 1. 

Proof. Let v = valp^(/(r)). We may assume that v <0. To conceptualize the proof, we divide it 
into steps. 

Step 1: Adding level structure. Let > 3 be an integer prime to p. We abuse notation and 
identify £^2,n{C) with r(A^)\^2i where r(A^) C Sp(4, Z) is the principal congruence subgroup of 
matrices congruent to 1 modulo N. Let Tf^f £ £/ such that 

where ttat: £/2,n — ^ -2^2,1 is the natural projection. The point tn is defined over the field pL^, 
where L^v = L{At-[N]) is the field obtained from L by adjoining the A^-torsion points of A^-. The 
extension L^/L is unramified at p (c.f. proof of Lemma r2.7.ip . We let pij^ be a prime of L^r 
such that pLj^ n L = px, . 

Lemma 7.0.5. Let fN = f° t^n- Then, 

valp^^(/7v(r7v)) = valp^(/(T)). 

Proof. This is clear: fNi^N) = /(''") a-^d the extension Lj^/L is unramified at p^. □ 
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It is therefore enough to prove the same bound given in (j7.0.ip but for valp^^ {fN{TN))- 
Step 2: Reducing to a geometric problem. 

Lemma 7.0.6. Let (/at) be the divisor of Jn on £^2,N- Let (/)oo be its polar part. Let J^,Ar he 
the Humbert divisor of invariant 1 on s^2,N- Then, 

(/)oo = 4fc • ^i,jv. 

Proof. It is well-known that vanishes to order 2 on Mi^i. The Lemma then follows immediately 
from Lemma 12.6.11 □ 

By Lemma 12.7.11 the abelian variety Ar^^ has good reduction at Plj^ • Let A be the ring of 
integers of L^r (the completion of L^r at pL^y) and *P its maximal ideal. Then there is a morphism 

i : A — ^ ^2,Af, 

corresponding to A^j^. 

Proposition 7.0.7. Let A := ^tjv- There is an unramified field extension M of L^^ of degree at 
most 2, with ring of integers V , such that 

A (g) (V/m^) ^ E X E', 

as polarized abelian varieties, where E,E' are elliptic curves over V/rOy, and where 

w = l—v/Ak] . 

Proof. By Lemma |5. 0.41 applied to 1//, the morphism t induces a morphism 

In the notation of Proposition I4.0.2| we have Mi^n = (3{^n)- 
Consider the cartesian diagram 

5 ^^N 

□ 

Spec(A/<P'") — ^ J^i,N 

Since /3 : — ^ <y^i,N is etale of degree 2, the morphism 5 — )• Spec(A/*P"') is etale and affine, and 
so S is an affine scheme, possibly disconnected. We can then choose a field M, as in the statement 
of the proposition, such that Spec(y/my) is equal to S (or one of its connected components). 
We therefore get a point 

Spec(l^/m^) ^ ^N, 

lifting L, and that means precisely that A V^/m^ is isomorphic, as a polarized abelian variety 
with level N structure, to a product of elliptic curves over V/xxiy, with the natural product 
polarization and some level N structure. □ 

Note that val^^, (/Ar(rAr)) = valp^^ (/Ar(TAr)) and so it is enough to show that (17.0. ip holds for 
"vsilmv if n{tn))- Let us reset our notation and recall that at this point we have a principally 
polarized abelian surface A = A-^j^ Cg) V with CM by Ok, having good reduction at my and such 
that 

A^V/m^ ^ (E X E',Ai x As), 
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where E, E', are elliptic curves over V/xxiy. Recall also that V is an unramified extension of the 
completion of L = NHk* at the prime p^. 

Step 3: Reduction to a statement about End(E). Our notation for the field K = Q{Vd){y/r) 
is precisely as in [GLlj . As in loc. cit., one argues that E and E' have supersingular reduction, 
denoted E, E', respectively. One writes 

(,v ^ ), Vr^i ^ 
\b —a) \—y w 

as elements of 

Hom/FxF'^-^ Hom(E',E) 
Hom(ExE)- l^jj^^^^^jg,^ End(E') 

(We are using V to denote the dual isogeny.) Note that h £ Hom(E',E) is an isogeny of degree 
bh^ < d. Using b, we may view End(E x E') as a subring of M2(End'^(E)) by 

Appying this to the matrices defining V^, ^/r, we find the matrices 

'a 66^ \ fx yb"^ 



1 i-bwb'^ 

As in |GLlj . the integral(!) elements 1, x, y^"^, xyb"^ must be linearly independent over Z (one 
shows that otherwise they generate a quadratic imaginary subfield Ki of Bp^^o such that we have 
K ^ M2{Ki), leading to a contraction). As in [GLl^ p. 464], one finds that the norms of these 
elements are bounded, respectively, by 

1, 62,d5i,d5i62, 

where 

5i = \a\ — \/3\ ■ \a\, 82 = \a\ + • \a\. 

It follows that 

[End(S) : End(E)] < [End(E) : Z{l,x,yb'^ ,xyb'^]] < 4.d'^{5i52f. 
(Cf. [GLTl p. 460] for the last inequality.) 

Step 4: Input from deformation theory. We now utilize the results of § [6] to bound the 
index [End(i^) : End(E)] from below. Recall that E is an elliptic curve over V/my and V is an 
unramified extension of the completion of L = NHk*, hence of N completed at the prime pN,i- 
Thus, ey ~ the absolute ramification index of 1/ ~ is equal to e = e(pAr^i/p). 

(1) Small ramification. Suppose that e < p — 1. By Theorem I6.5.3| 

[End(E) : End(E)] > /{r^^/el-i)^ 

and so 2{\wle\ - 1) < \o^p{U^ (b^hf) . Since bxb2 = o? - 0^a^ < o? = \{lk{r)f , we 
find that wje < \w/e\ < ^logp{Ad^ {6162)^) + 1 < logp(^^^^) + 1. Since w = l-v/Ak], 
it follows that -v < Akw < Ake [log„(^^^2^) + 1 
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(2) High ramification. Suppose that e > p — I. By Theorem 16.6.31 , 

[End(^) : End(E)] > piil^/^']-^) , 

Similar computations yield —v < Ake 8 logp(^-^^^^) + 2 . 



□ 



7.1. Factorization of class invariants and denominators of Igusa class polynomials. 

We derive several consequences of Theorem I7.0.4[ 

Corollary 7.1.1. Let K be a quartic primitive CM field, as in the beginning o/ § and let f)i(x), 
i = 1,2, 3, be the class polynomial defined using the function as in ^2.41 equation ^2.4-^ , 

where k{i) = 6,4,4 for i = 1,2,3, respectively. In the notation of Theorem \ 7. 0.41 coefficient 
^dcg(hi)-a hi{x), which is a rational number, has valuation valp greater or equal to 

-4a-fc«flogp(^)+l) e<p-l 
-4a-A:« (81ogp(^^3^) +2) else. 

Proof. Straightforward from Theorem 17.0.41 □ 

Remark 7.1.2. We remark that this corollary is crucial in bounding the complexity of construction 
of CM curves of genus 2, by the methods currently used. The Corollary is proven for the invariants 
that we find convenient; with little effort one can deduce easily such bound for the Igusa class 
polynomials appearing in equation 12.4. 11 which are often used in the literature. Further, we could 
have equally proven the Corollary for class polynomials formed out of the Igusa coordinates ji 
(see §2.3p . In principle, this is "the right thing to do", on the other hand, given Proposition 12.3.1] 
in practice it suffices to deal only with (some set of) the absolute Igusa invariants. 

Corollary 7.1.3. Let n($; 0, b) be the class invariant defined in |DSGj . associated to fractional 
ideals a, b of K. Let pi be a prime of L, as in Theorem \ 7.0.4\ and Phj^, = Pl H Hk*. We note 
that n(<I>; a, b) G Hk* C L. We have 

(ae-(logj!Sp^)+l) e<p-l 

l™W.w*;".^))ls(,,.j„„^^^(^)^i) .... 

where e* is the ramification index ofpx* = pK*,i over p. 
Proof. We refer to [DSC] for the detailed definitions. We have 

^(•^'^) = e(¥(o^' 

which may also be written as 



- , 

where r is a period matrix for ^{Ok) and, for a^"*^ an integral ideal, 7 G Sp(4,Q) is a matrix 
with integral entries and determinant Norm(a) (cf. [DSGj p. 786 and §3.2). We remark that we 
may also write 

where r' is a period matrix corresponding to a~^. 
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Now fix a prime ideal *p of Q above the rational prime p. Assume a ^ is an integral ideal 
of norm > 3, which is relatively prime to We note that both and ^ are modular 

functions of level N, defined over Q{Cn), and u(^, a) is obtained by evaluating them at a point 
with CM by Ok- We can therefore apply Theorem 17.0.41 or, more precisely, the result we have 
obtained in its proof by passing to level N. We consider both (^%^) (r) and (e^) {r') to 

get from one a bound on the denominator of u{^, a) at *p and, from the other, a bound on 
the numerator. The points r, r' correspond to abelian varieties with CM by Ok defined over 
the compositum L' of L and Q{Cn), which does not increase the ramification index e of p at 
pL = ^ n L. We may then consider the valuation at p/,/ = *p n L' . We conclude that 

■ 1 




2 



|valp^,('u(^>,a))| < { 
However, the algebraic number n(<I>, a) actually lies in Hk* and so we get 
|vaW^.('u(«>,a))| < 



4e*(log4^^)+l] e<p-l 



4eM81ogJ^^]+2] else, 



where e* = e{pK* /p)- 

Let us now consider a, b). The class invariant a, b) depends only on the ideal class 
of a and b in the class group of K. Having fixed we may assume therefore that a~^, b~^ are 
integral and of norm prime to p. We note the expressions: 

ah\= ^(^'^^) = e(c&(a-ib-i))9($(0^)) 
^ ' ' ^ n($,a)n($,b) e($(a-i))G($(b-i)) ' 

Instead of using directly our bound above, we note that for a~^, b~^ integral ideals, we may write 



where r is a period matrix for (^{Ok)-, t' is a period matrix for $(a~^), /3, 7 € Sp(4,Q) are 
matrices with integral entries and determinants prime to p. Thus, repeating the consideration 
above, we conclude the bound in the corollary. □ 
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